[Samba] Not able to login to Samba PDC
Hello All, I am getting this error when I try to join my Win2K m/c to Samba, Windows cannot log you on because the profile cannot be loaded. Contact your network administrator. DETAIL - The system cannot find the file specified. I dont want Roaming profile to be implemented, I just want to give users local profiles only. When the client tries to logon to the PDC it looks for a profile to download where do I put this default profile. Please help me I am totally lost with this error from past two days I tried everything & googled around quite a bit but of no help. Please help me. TIA Manjunath DISCLAIMER: This e-mail and any attachment (s) is for authorised use by the intended recipient (s) only. It may contain proprietary material, confidential information and/or be subject to the legal privilege of iWave Systems Technologies Private Limited. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from retaining, using, copying, alerting or disclosing the content of this message. Thank you for your co-operation. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] please help me.....
yes both the accounts of user exist for linux and for samba. plese see the log below, check is it ok everything?? log--- [root@LinuxBox /]# smbpasswd root New SMB password: Retype new SMB password: Password changed for user root. Password changed for user root. [root@LinuxBox /]# passwd root Changing password for user root. New password: Retype new password: passwd: all authentication tokens updated successfully. [root@LinuxBox /]# passwd root$ Changing password for user root$. New password: Retype new password: passwd: all authentication tokens updated successfully. [root@LinuxBox /]# log--- the user exist, becasue i get this error just when i give correct password and user name. and when i give wrong password or user name or both then it gives me the error "Logon Failure : Unknown user name or bad password" will be very Thankfull for any help best regards Adil --- "Bradley W. Langhorst" <[EMAIL PROTECTED]> wrote: > On Tue, 2003-02-04 at 00:38, Adil Hussain wrote: > > i want to configure samba as PDC .i installed the > > samba on the linux box machine and configure it > > accordingly. > > I am trying to connect the windows 2000(server) as > a > > client of this domain. > > when i press ok after writing the domain name at > the > > windows 2000 (as a client). It gives me a window , > > asking for the Name and Password and when i give > it > > the root/[password] to it, it says > > > > The following error occured attempting to join the > > domain "[domain name]" > > The specified user does not exist. > are you sure that the root user exists in smbpasswd? > check to be sure that you are not disallowing the > root user in smb.conf. > > brad > > > -- > Bradley W. Langhorst <[EMAIL PROTECTED]> > __ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] Samba and Winbindd problem
Hi, i had have the same problem with winbindd try this "smbpasswd -j -r -U Administrator%" Now you should read "Joined Domain " Now set the Username and PAssword for winbindd to access the PDC I have used the admin account for this "wbinfo -A Administrator%" Now try again wbinfo -u After this you have to check the passwd file with "getent passswd" Gruß / Kindly regards Thomas Schmidt Systemadministration / Netzwerke |N |O |C | --|--|--|--|- | GROVE Network Operation Center http://www.grove.de Tel. +49 2773-8167-0 Fax +49 2773-8167-20 There are 10 types of people in the world: Those who understand binary, and those who don't. > -Ursprüngliche Nachricht- > Von: Kevin Bramblett [mailto:[EMAIL PROTECTED]] > Gesendet: Dienstag, 4. Februar 2003 01:44 > An: [EMAIL PROTECTED] > Betreff: [Samba] Samba and Winbindd problem > > > Hi all, > > I am trying to get Samba 2.2.7a working with my Windows2000 > PDC. My RedHat > Linux 7.2 box successfully joined the domain. However, when I use the > wbinfo -g command while Samba and Winbindd are running, I get > the error > 0xc233 instead of the DOMAIN+username I am expecting. > What is going > wrong here? This is my second Samba box on this domain and > the first one is > working fine using Samba 2.2.3a. > > All help is very much appreciated! > > Kevin Bramblett > Network Administrator > > No trees were killed in the sending of this message. However > a large number > of electrons were terribly inconvenienced. > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winbind and useradd
Hi, I have succesfully installed the latest version of samba (2.2.7a.tar.gz) with winbind support and it seems to work. If I run getent passwd or group I can see local and remote (NT4) users and groups but, if I create a new user linux login with a NT group, useradd says: [linux] useradd -g DOMAIN+group -d HOME DIR -s /bin/false USER useradd:unknown group DOMAIN+group It not should use nsswitch.conf to check for groups? My nsswitch.conf file is: passwd files winbind groupfiles winbind With getent it works but useradd not! I saw also in /etc/pam.d/ there is a useradd configuration file, so I tried with several combinations to add pam_winbind.so module but without success. useradd file. I have not any ideas for solving this problem. Can anyone help me? Thank you very much for yours collaboration, Gabriele. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Password expire
Hello, I was wondering if it is possible to make the users logon-password expire on our samba PDC ? I'd like to force all the users to change password every once a month but I'm not sure how!? Best regards Frank Nørvig -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Binary distribution for AIX 4.3
Gavin I couldn't get 2.2.5 from Bull to work either. However I downloaded gcc from Bull and built 2.2.7a from the source and it was completely straightforward. Columb Healy ORS Unix Support Siemens Business Services Tel - 01253 793792 Mob - 07776 225 976 Fax - 01253 793924 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] deleting symlinks only
hello list, is it possible to delete a symlinked directory over a samba-share, without deleting it's content but leaving the link-target as it is and deleting the symlink only? If I interpret samba's behaviour correctly, on deletion samba does not recognize the link as a link but as a directory, descends into it and deletes the content recursively, finally tries to delete the directory which is none and stops. So all what is left in the end, is an empty directory and a link pointing to it... Setting the userpermissions is no solution for us as users have to have full access to the content. We are using samba 2.2.7a on IRIX. The symlinked directories are used as libraries, which are being linked to from different project-directories. If a project is finished, the link to the libraries must be deleted by the users. any hint would be helpful, thx Antonio Nikolic eMail: [EMAIL PROTECTED] [EMAIL PROTECTED] Internet: http://www.ibk-consult.com IBK Ingenieurconsult für Maschinenbau GmbH Kornstr. 17-21 30167 Hannover -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Error in configure Last CVS and 3.0.alpha21 on Solaris 8
> ld: fatal: library -lpopt: not found > > >>The last line is the important one, I think: you need the popt library. On Solaris 8, for example, I believe that >>> >>even the pre-packaged versions from sunfreeware.com require that the popt package be installed at the same time. >>Look at www.sunfreeware.com for a pre-compiled binary or source code. > You shouldn't need it. Samba has a built-in popt in the event that you > don't...it should be detecting this. Are you sure this is the problem? > This is one of the last steps before it finishes...you can try > --with-included-popt. If that doesn't help, you've got a different > problem. I've try to with and without the POPT package, with and without the --with-included-popt, but didn't fix my problem, still the same message What can it be ? I'm following the procedure describe in the document from Clive Elsum and the only problem I've found is the installation of OpenSSH (I've installed instead of compiling it the package from Sunfreeware) Alessandro Bruni -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Sambe Help Required
Hi, I am using Samba mounted on a UNIX box. I have mapped a drive froma NT/Windows 2000 box and try to do a search of text in documents contained in that folder. The client reports that the performance is slow. I would like to know is it could be due to Samba where I am connecting to and download? Is there any speed difference between directly talking to UNIX box and thru Samba Mount? Thanks guru Disclaimer: This document is intended for transmission to the named recipient only. If you are not that person, you should note that legal rights reside in this document and you are not authorized to access, read, disclose, copy, use or otherwise deal with it and any such actions are prohibited and may be unlawful. The views expressed in this document are not necessarily those of HCL Technologies Ltd. Notice is hereby given that no representation, contract or other binding obligation shall be created by this e-mail, which must be interpreted accordingly. Any representations, contractual rights or obligations shall be separately communicated in writing and signed in the original by a duly authorized officer of the relevant company. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba on SCO OpenServer
Hi all, I'm running Samba 2.2.5 (I think. I just downloaded the package from the Samba site) and I have a question. Everything is working ok but the clients report that the total space on the share is about 8GB, even though the share is a single filesystem that fills a 40GB hard disc. Is this a Samba specific thing that I should worry about or is it indicitive of me having some sort of major problem on the OS/Hardware side of things? Chris -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] release-date of 3.0
On Tue, 2003-02-04 at 02:53, peter grotz wrote: > To the samba-people > > when can we expect a stable 3.0 release? > I´ve heard of the massive changes using ldap between 2.2.7a > and 3.0. The changes in 3.0 are really not that big - and as far as I know, 100% backward compatible. The support is more complete, behaves a bit better compared to 2.2, and we have some new optional features, but there shouldn't be any 'upgrade issues'. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Logging user auth with mysql
Hi all,
I would like to log the user acces with something like:
root preexec = echo "INSERT INTO logins (user, host, ip, date, time) VALUES
('%u', '%m', '%I', CURDATE(), CURTIME() );" | /usr/bin/mysql -u root
sambaLogins
Alas this doesn't work, I get nothing logged.
I write this statement to /tmp/logons with:
root preexec = echo "insert into logins (user, host, ip, date, time) values
('%u', '%m', '%I', CURDATE(), CURTIME() );" >> /tmp/logons
In /tmp/logons I see lines saying e.g.:
insert into logins (user, host, ip, date, time) values ('wer', 'kiebitz',
'172.18.14.22', CURDATE(), CURTIME() );
When I cut and paste this as user root, it works.
Has anybody an Idea, what i do wrong? Or an working example?
Thanks,
Malte Mueller
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] some permissions issues
I´m facing some troubles with file / directory permissions... I log on the domain as admin user(root), and theres a pub share, on witch everyone needs to have permission to create / modify files, but when I change or create a file, only root can change the file, no one else. And then i need to go to server to chgrp users * -R and chown nobody * -R to allow others users to change the file. can someone give-me a clue with this ? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: problem connecting the win2k client to samba server atlinux
i am using win2k server, i counldnt found the the key signorseal in the registery the only key i found was HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SeCEdit\Reg Values\MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/RequireSignOrSeal and four values in front of this key (Default) REG_SZ (Value not set) DisplayName REG_SZ Secure channel: Digitally encrypt or sign secure channel data(always) DisplayType REG_DWORD 0x (0) ValueType REG_DWORD 0x (4) i changed the value 4 --> 0 but its still not working there are also some other values named "requiresignorseal" in registery but all are already zero. please see the log of change password which i have sent to the list. that all accounts are there. any other thing you want ... please tell me Thanks and reagards Adil --- Lloyd Anderson <[EMAIL PROTECTED]> wrote: > Hi there, > > I did manage to solve the problem. The steps to take > are the following: > > 1. Make sure a machine account exists in /etc/passwd > (eg. machine_name$, the > dollar ($) sign is important) > 2. Make sure the machine account does NOT exist in > /etc/samba/smbpasswd. > 3. Edit the registry on the win2k client (or XP > client), search for > signorseal (one word) and change the values to 0 > (zero). (This normally > works if you change the first one only, but > sometimes you need to change all > the occurences.) > 4. Join the domain, when it asks for a username or > password, use root and > your root password. > > I hope this helps. > > Regards, > Lloyd Anderson > NetworksOnline - "Information is the Solution" > A Division of CDR-Technologies > > T: +27 11 886 7644 > F: +27 11 886 7643 > C: +27 82 896 5196 > E: [EMAIL PROTECTED] > W: www.networksonline.co.za > > --- > > -Original Message- > From: Adil Hussain [mailto:[EMAIL PROTECTED]] > Sent: Monday, February 03, 2003 4:14 PM > To: [EMAIL PROTECTED] > Subject: problem connecting the win2k client to > samba server at linux > > > hi Lloyd Anderson, > > my name is adil. > you had some problem with samba connecting the win2k > client as the link below > > http://lists.samba.org/pipermail/samba-ntdom/2002-January/054484.html > > i just wanted to know that have you solved the > problem > and if yes how did you solve the problem. > i am also getting the same type of problem. > thanks > best regards > Adil > > > __ > Do you Yahoo!? > Yahoo! Mail Plus - Powerful. Affordable. Sign up > now. > http://mailplus.yahoo.com > __ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] query on security = server, domain
if Win NT is acting as a PDC, and Samba is added in the network, then when would it be required to put security = server when security = domain already exists. in other words why have security = server when security = domain can be put. -- Get Your Private, Free E-mail from Indiatimes at http://email.indiatimes.com Buy the best in Movies at http://www.videos.indiatimes.com Bid for for Air Tickets @ Re.1 on Air Sahara Flights. Just log on to http://airsahara.indiatimes.com and Bid Now! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] spurious domian login problems
We have a few win9x workstations, that have spurious login problems. They get the message: No domain server was available to validate your password you may not be able to gain access to some network resources. The passwords are definetly correct and the problem will sometimes disappear after 5 - 10 retries, but almost always after a full restart of the win9x PC, very occasionally it takes as many as 5 reboots before it logs in to the domina again. All I can find in the log.nmbd file around that time is a "code = 0x0" returned instead of the usual 0x12 or 0x7. Does this give anybody a clue as to what is going on. Or is looking at log.nmbd a waste of time. I simply can't find an entry that would be relevant in the log.smbd around that time. I am running at loglevel 3 how high should I go to get more details to help debug this problem? successfull logins appear to have either code 0x12 or 0x7 and only the failed logins appear to have code 0x0. [2003/01/11 18:32:20, 1] nmbd/nmbd_processlogon.c:process_logon_packet(70) process_logon_packet: Logon from 192.168.1.122: code = 0x12 [2003/01/11 17:22:21, 1] nmbd/nmbd_processlogon.c:process_logon_packet(70) process_logon_packet: Logon from 192.168.1.26: code = 0x7 [2003/01/04 11:51:06, 1] nmbd/nmbd_processlogon.c:process_logon_packet(70) process_logon_packet: Logon from 192.168.1.197: code = 0x0 Any help appreciated. Urs RAU Head of Information Services OM UK HeadQuarters + | Operation Mobilisation, The Quinta, Weston Rhyn, OSWESTRY | | SY10 7lT, UK, FAX: +44-1691-778378, TEL: +44-1691-773388 | | Email: [EMAIL PROTECTED] | +---+ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] query on security = server, domain
Em Tue, Feb 04, 2003 at 04:57:23PM +0530, akshaysalkar escreveu: > in other words why have security = server > when security = domain can be put. AFAIK, you can't have domain logons in the samba machine when it has security = domain. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba on Tru64 UNIX Cluster
Hi list, I am planning to deploy samba 2.2.6 on a two-node cluster running Tru64 UNIX 5.1A. Each node will be running an instance of samba providing different services, but I want the locks directory to be shared between them so that if one node goes down, the other can take over its services and still have correct information about open files etc. My question: Can the tdb's handle being written to by more than one samba process, or am I likely to encounter corruption? Regards, Philipp -- +++ GMX - Mail, Messaging & more http://www.gmx.net +++ NEU: Mit GMX ins Internet. Rund um die Uhr für 1 ct/ Min. surfen! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba PDC and Samba Client
Hello, I have 1 SAMBA PDC : version : Samba version 2.2.6pre2 name: lothar ip: 192.191.193.10 and 192.168.1.2 PDC of ADMIN01 I have 1 SAMBA client: version:Samba version 2.2.7a name: intranet ip 192.191.193.2 member of ADMIN01 with option Wins server and winbind . and one Win2000: member of ADMIN01 - My pdc have the add user script (work fine i have see the machine in /etc/passwd and in the smbpasswd). to join my client (wins) i have do: /usr/local/samba/bin/smbpasswd -j ADMIN01 -r lothar -U root (my root smb pass is differant of the system root pass) getent passwd work fine too. but when i try to access in share of client i can't because it say i m maura and not ADMIN01\maura: [2003/02/04 13:56:49, 2] smbd/reply.c:reply_sesssetup_and_X(985) Defaulting to Lanman password for maura [2003/02/04 13:56:49, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'maura' in passdb. [2003/02/04 13:56:49, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'maura': authentication failed [2003/02/04 13:56:49, 2] smbd/reply.c:reply_sesssetup_and_X(985) Defaulting to Lanman password for maura [2003/02/04 13:56:49, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'maura' in passdb. [2003/02/04 13:56:49, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'maura': authentication failed [2003/02/04 13:58:49, 2] smbd/process.c:timeout_processing(1126) Closing idle connection [2003/02/04 13:58:49, 2] smbd/server.c:exit_server(461) Closing connections if i look who are connected in the PDC the machine are connected in nobody. IPC$ nobody 6553411243 intranet (192.191.193.2) Tue Feb 4 13:18:10 2003 and the log for the intranet machine in the pdc say that continualy: [2003/02/04 14:14:35, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:35, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:36, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:36, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:37, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:37, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:38, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:38, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:39, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:39, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:40, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:41, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:41, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:42, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:42, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:43, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/04 14:14:43, 2] smbd/server.c:exit_server(461) Closing connections In the Win2000, I can share for an domain user but this share can't be access because access is denied :(( I join smb.conf, and i hope you can help me. thank. # Samba config file created using SWAT # from 0.0.0.0 (0.0.0.0) # Date: 2002/09/30 19:40:30 # Global parameters [global] workgroup = ADMIN01 netbios name = LOTHAR server string = Controleur Principal security = user domain logons = Yes os level = 34 preferred master = True domain master = True admin users = maura root domain admin group = @adm #options WINS dns proxy = yes wins server = 192.191.193.2 #option des mots de passe encrypt passwords = Yes smb passwd file = /etc/samba/smbpasswd add user script = /usr/sbin/useradd -c MACHINE_NT -d /dev/null -g 1001 -s /bin/false -M %u # unix password sync =yes #Option de log log file = /var/log/samba/log.%m max log size = 2000 log level = 2 # oplock break wait time = 20 #Options De Tunning # socket options = SO_BROADCAST TCP_NODELAY SO_SNDBUF=4096 SO_RCVBUF=4096 #Le SO_BROADCAST semble necessaire lorsque le WINS est pas sur le meme reseau socket options = TCP_NODELAY SO_BROADCAST deadtime = 5 #Option d'impression printcap name = lpstat printing = cups max disk size = 200 #Option de LOGON time server = yes logon drive = m: logon script = logon.bat #pour NT/2000/XP logon path = \\lothar\profile\%U #pour Windobe 98 logon home = \\%L\%U\.profiles #repertoire personnel [homes] comment = Répertoire personnel privé read only = No create mode = 0600 directory mode = 0700 browseable = No
[Samba] Win 2000 & XP Printer problem
I'm running Samba 2.2.5 on HP-UX 10.20. I've recently started adding WinXP (and 2000) clients to my network. Here's my issue: (It seems to effect both the XP & 2000 machines) I installed a WinXP machine on the network. I was able to add a bunch of samba-networked printers to the Xp machine. I recently added 2 new printers to the network. I added the printer names to my samba "printcap" file. I'm able to add these printers to any Win98, 95 machines. But my WinXP machine doesn't see them. Even if I don't "browse" for it, and just type it in manually "\\Server\printer" it errors: "Windows cannot connect to the printer. Either the printer name was typed incorrectly, or the specified printer has lost its connection to the server." I even removed a printer from my network, removed its printer name from the "printcap" file.This printer STILL shows up in WinXP. It even lets me install it. I've even restarted samba just for the sheer fun of it. Is there some sort of "Cache" or something that stores this information on WinXP machines? Does anyone have any ideas? It sure would be "Handy" to be able to add printer to my network... Thanks! Ron --- Ron Bombard, Network Administrator Meddle not in the affairs of dragons... for you are crunchy, and taste like chicken. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] some permissions issues
Am Die, 2003-02-04 um 12.03 schrieb CPDead: > I log on the domain as admin user(root), and theres a pub share, on witch > everyone needs to have permission to create / modify files, but when I > change or create a file, only root can change the file, no one else. And > then i need to go to server to chgrp users * -R and chown nobody * -R to > allow others users to change the file. try: create mask = 0666 directory mask = 0777 ciao Dariush -- PGP Fingerprint: 0x886C99A1 signature.asc Description: Dies ist ein digital signierter Nachrichtenteil -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] some permissions issues
I log on the domain as admin user(root), and theres a pub share, on witch everyone needs to have permission to create / modify files, but when I change or create a file, only root can change the file, no one else. And then i need to go to server to chgrp users * -R and chown nobody * -R to allow others users to change the file. the problem is, that the file get's the primary group from root!!! - so if u use 0XX0 permission, other people have no access to the files. give the directory the right group and use the gid bit. e.g.: directory: rights: 2770 / owner: somebody.win in smb.conf: directory mode=2770 create mode=0660 so everybody of the group "win" has access to the data. even if "root" creates a file.. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba and Winbindd problem
Thanks for the tip. However, I still get the 0xc233 error every time I run the wbinfo -u or -g command. When I use the wbinfo -a username%password it complains about not using plain text passwords, which my smb.conf script explicitly states is encrypted. Do you have any other clues I can pursue? Thanks, Kevin Bramblett Network Administrator - Original Message - From: "Thomas Schmidt" <[EMAIL PROTECTED]> To: "Kevin Bramblett" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Tuesday, February 04, 2003 2:44 AM Subject: AW: [Samba] Samba and Winbindd problem Hi, i had have the same problem with winbindd try this "smbpasswd -j -r -U Administrator%" Now you should read "Joined Domain " Now set the Username and PAssword for winbindd to access the PDC I have used the admin account for this "wbinfo -A Administrator%" Now try again wbinfo -u After this you have to check the passwd file with "getent passswd" Gruß / Kindly regards Thomas Schmidt Systemadministration / Netzwerke |N |O |C | --|--|--|--|- | GROVE Network Operation Center http://www.grove.de Tel. +49 2773-8167-0 Fax +49 2773-8167-20 There are 10 types of people in the world: Those who understand binary, and those who don't. > -Ursprüngliche Nachricht- > Von: Kevin Bramblett [mailto:[EMAIL PROTECTED]] > Gesendet: Dienstag, 4. Februar 2003 01:44 > An: [EMAIL PROTECTED] > Betreff: [Samba] Samba and Winbindd problem > > > Hi all, > > I am trying to get Samba 2.2.7a working with my Windows2000 > PDC. My RedHat > Linux 7.2 box successfully joined the domain. However, when I use the > wbinfo -g command while Samba and Winbindd are running, I get > the error > 0xc233 instead of the DOMAIN+username I am expecting. > What is going > wrong here? This is my second Samba box on this domain and > the first one is > working fine using Samba 2.2.3a. > > All help is very much appreciated! > > Kevin Bramblett > Network Administrator > > No trees were killed in the sending of this message. However > a large number > of electrons were terribly inconvenienced. > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba on Tru64 UNIX Cluster
Hi Philipp, I am just starting to get up to speed on Tru64 after the HP-Compaq merger, but here's my "take" on your question. The smbds use fcntl to synchronize access to the TDBs and in a Cluster File System, or CFS, the fcntl call should work across nodes. Therefore the concurrent access of the TDB by may processes on 2 or more nodes should be OK. I would worry about though is the NMBD process. There is supposed to be only 1 of these and in your scenario there will be 2. There may be some synchronization issues with NMBD though I don't know how big or small this problem may be. Cornelio Bondad Hewlett Packard -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Philipp Trautmann Sent: Tuesday, February 04, 2003 5:19 AM To: [EMAIL PROTECTED] Subject: [Samba] Samba on Tru64 UNIX Cluster Hi list, I am planning to deploy samba 2.2.6 on a two-node cluster running Tru64 UNIX 5.1A. Each node will be running an instance of samba providing different services, but I want the locks directory to be shared between them so that if one node goes down, the other can take over its services and still have correct information about open files etc. My question: Can the tdb's handle being written to by more than one samba process, or am I likely to encounter corruption? Regards, Philipp -- +++ GMX - Mail, Messaging & more http://www.gmx.net +++ NEU: Mit GMX ins Internet. Rund um die Uhr für 1 ct/ Min. surfen! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] Samba and Winbindd problem
Pay attention. This command is case sesitiv. You have to use a great/capital "A"(!) Here the text of the winbind documentation: -a username%password Attempt to authenticate a user via winbindd. This checks both authenticaion methods and reports its results. -A username%password Store username and password used by winbindd during session setup to a domain controller. This enables winbindd to operate in a Windows 2000 domain with Restrict Anonymous turned on (a.k.a. Permissions compatiable with Windows 2000 servers only). - Try it again with a capital A :) > -Ursprüngliche Nachricht- > Von: Kevin Bramblett [mailto:[EMAIL PROTECTED]] > Gesendet: Dienstag, 4. Februar 2003 16:01 > An: Thomas Schmidt; [EMAIL PROTECTED] > Betreff: Re: [Samba] Samba and Winbindd problem > > > Thanks for the tip. However, I still get the 0xc233 > error every time I > run the wbinfo -u or -g command. When I use the wbinfo -a > username%password > it complains about not using plain text passwords, which my > smb.conf script > explicitly states is encrypted. > > Do you have any other clues I can pursue? > > Thanks, > Kevin Bramblett > Network Administrator > - Original Message - > From: "Thomas Schmidt" <[EMAIL PROTECTED]> > To: "Kevin Bramblett" <[EMAIL PROTECTED]>; > <[EMAIL PROTECTED]> > Sent: Tuesday, February 04, 2003 2:44 AM > Subject: AW: [Samba] Samba and Winbindd problem > > > Hi, > > i had have the same problem with winbindd > > try this > > "smbpasswd -j -r -U > Administrator%" > Now you should read > "Joined Domain " > > Now set the Username and PAssword for winbindd to access the PDC > I have used the admin account for this > "wbinfo -A Administrator%" > > Now try again > wbinfo -u > > After this you have to check the passwd file with "getent passswd" > > Gruß / Kindly regards > Thomas Schmidt > > Systemadministration / Netzwerke > |N |O |C | > --|--|--|--|- > | GROVE > Network Operation Center > > http://www.grove.de Tel. +49 2773-8167-0 > Fax +49 2773-8167-20 > > There are 10 types of people in the world: Those who > understand binary, and > those who don't. > > > > -Ursprüngliche Nachricht- > > Von: Kevin Bramblett [mailto:[EMAIL PROTECTED]] > > Gesendet: Dienstag, 4. Februar 2003 01:44 > > An: [EMAIL PROTECTED] > > Betreff: [Samba] Samba and Winbindd problem > > > > > > Hi all, > > > > I am trying to get Samba 2.2.7a working with my Windows2000 > > PDC. My RedHat > > Linux 7.2 box successfully joined the domain. However, > when I use the > > wbinfo -g command while Samba and Winbindd are running, I get > > the error > > 0xc233 instead of the DOMAIN+username I am expecting. > > What is going > > wrong here? This is my second Samba box on this domain and > > the first one is > > working fine using Samba 2.2.3a. > > > > All help is very much appreciated! > > > > Kevin Bramblett > > Network Administrator > > > > No trees were killed in the sending of this message. However > > a large number > > of electrons were terribly inconvenienced. > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Logon time restrictions; change ownership via samba
Are there plans to support logon time restrictions in Samba, or is it somehow supported already? We are using an NT4 PDC, and would like the samba servers to disconnect users outside of their logon times. Also, is there any way to allow one to change file ownership via samba? I have not found any way to do this. We would like domain admins to have this ability so that we can maintain file ownership & permissions from NT boxes to allow quotas to be correctly managed on the samba boxes. Currently files copied/moved to a user share on the samba box keep the ownership of the user performing the move. Domain admins need the ability to change ownership/permissions to that of a specific user. I'm using samba 2.2.5 on Redhat 7.3 with SGI XFS 1.1 partitions. Shawn Wright, I.T. Manager Shawnigan Lake School [EMAIL PROTECTED] http://Zuiko.sls.bc.ca/swright http://www.sls.bc.ca -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] File log
Hello, Is it possible to log changes in files on a samba-server? I need to log which changes users do in shared folders to track if someone is deleting, changing or creating files. Is this possible? Regards, Frank Nørvig -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem: Samba terminates
Hi, I have at home two PC's, one is running Windows 2000, the other SuSE Linux 7.3. (Samba 2.2.1) They have a direct Ethernet connection. The Problem I have with Samba is that when I copy a big file (i.e.30 MB) in what ever direction and more than one file is to copy, the network connection terminates after the big file is copied. I must then restart the Linux machine to make the network work again. When I have hundreds of small files it works in both directions. In the samba log file with log level 10 I found the following entry as the last that belongs to the file copy action: [2003/01/07 23:52:47, 3] smbd/server.c:exit_server(483) Server exit (caught signal) When I'm locally on the Linux machine then after the big file was copied the cp command doesn't return, I have to kill it. The last kernel message is: smb_request: result -512, setting invalid I have changed the smb.conf file a lot but the problem is always the same. The latest thing I tried was to read the network HowTo's and to change the network addresses, but this also leaded to no improvement. The only Idea I have is that the network terminates itself when for 10 seconds or so no communication on the net occurs. Wolfgang -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Not able to login to Samba PDC
On Tue, 4 Feb 2003, Manjunath H N wrote: > Hello All, > > I am getting this error when I try to join my Win2K m/c to Samba, > > Windows cannot log you on because the profile cannot be loaded. Contact your > network administrator. Send me your smb.conf off-line. I'll check it out. > DETAIL - The system cannot find the file specified. > > I dont want Roaming profile to be implemented, I just want to give users > local profiles only. Your choices are: 1. Local profiles - I know of no registry keys that will allow auto-deletion of LOCAL profiles on log out 2. Roaming profiles - your options here are: - can use auto-delete on logout option - requires a registry key change on workstation a) Personal Roaming profiles - should be preserved on a central server - workstations 'cache' (store) a local copy - used in case the profile can not be downloaded at next logon b) Group profiles - loaded from a cetral place c) Mandatory profiles - can be personal or group - can NOT be changed (except by an administrator A WinNT4/2K/XP profile can vary in size from 130KB to off the scale. Outlook PST files are most often part of the profile and can be many GB in size. On average (in a well controlled environment) roaming profie size of 2MB is a good rule of thumb to use for planning purposes. In an undisciplined environment I have seen up to 2GB profiles. Users tend to complain when it take an hour to log onto a workstation but they harvest the fuits of folly (and ignorance). The point of all the above is to show that roaming profiles and good controls of how they can be changed as well as good discipline make up for a problem free site. PS: Microsoft's answer to the PST problem is to store all email in an MS Exchange Server back-end. But this is another story ...! So, having LOCAL profiles means: a) If lots of users user each machine - lot's of local disk storage needed for local profiles b) Every workstation the user logs into has it's own profile - can be very different from machine to machine On the other hand, having roaming profiles means: a) The network administrator can control EVERY aspect of user profiles b) With the use of mandatory profiles - a drastic reduction in network management overheads c) User unhappiness about not being able to change their profiles soon fades as they get used to being able to work reliably But note: I have managed and installed MANY NT/2K networks and have NEVER found one where users who move from machine to machine are happy with local profiles. In the long run local profiles bite them. > When the client tries to logon to the PDC it looks for a profile to download > where do I put this default profile. Firstly, your samba server need to be configured as a domain controller. server = user os level = 32 (or more) domain logons = Yes Plus you need to have a NETLOGON share that is world readable. It is a good idea to add a logon script to pre-set printer and drive connections. There is also a facility for automatically synchronizing the workstation time clock with that of the logon server (another good thing to do). Note: To invoke auto-deletion of roaming profile from the local workstation cache (disk storage) you need to use the Group Policy Editor to create a file called NTConfig.POL with the appropriate entries. This file needs to be located in the NETLOGON share root directory. Oh, of course the windows clients need to be members of the domain. Workgroup machines do NOT do network logons - so they never see domain profiles. Secondly, for roaming profiles you need: logon path = \\%N\profiles\%U (with some such path) logon drive = H:(Z: is the default) Plus you need a PROFILES share that is world writable. > Please help me I am totally lost with this error from past two days I tried > everything & googled around quite a bit but of no help. Please help me. I hope this helps you. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SAMBA PDC permissions quandry
Hello all: I have a Samba PDC (Samba 2.2.3) on RedHat 7.3 currently serving about 40 to 50 clients with the intent of adding another 60 to 70 in the coming weeks. Everything is working decently well. I do have one problem that I am concerned about though. I have had to make many users Admin users so that a certain application can run. This does not concern me so much except for where data is concerned. I have several high priority users putting data in their Home directory so that it can be backed up on the server. I have discovered that even though these directories are not browsable, anyone who is in the smbadmins group can type //crhpdc/username in Start>Run and have full access to the person's home directory. I am stuck here as to how to fix this. [homes] comment = Home Directories browseable = no writable = yes admin users = @smbadmins [profiles] path = /home/samba/profiles guest ok = yes browseable = no read only = no create mask = 0600 directory mask = 0700 share modes = no So really I am looking for the answer to two questions. 1. How can I have Administrators that have all the power on the local machine, but normal user power on the server? 2. How can I setup "Power Users" so that people might be able to run this piece of software that is giving me problems but won't be Administrators? Any help will be most appreciated. Full SMB.CONF follows. A Cline [global] ;basic server settings workgroup = CRHDOM netbios name = CRHPDC server string = Cushing PDC socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192 guest account = nobody ;Standard printing settings printing = BSD print command = /usr/bin/lpr -P%p -r %s lpq command = /usr/bin/lpq -P%p lprm command = /usr/bin/lprm -P%p %j min print space = 2000 ;PDC and master browser settings os level = 64 preferred master = yes local master = yes domain master = yes ;Security and Logging Settings security = user encrypt passwords = yes #update encrypted = yes passwd chat debug = yes domain logons = yes log file = /var/log/samba/log.%m log level = 2 max log size = 50 hosts allow = 127.0.0.1 172.29.56.0/255.255.252.0 ;User profiles and home directory #logon home = \\%L\%U\.profile logon drive = R: logon path = \\%L\profiles\%U logon script = %U.bat add user script = /usr/sbin/useradd -d /dev/null -g smbmachines -s /bin/false -M %u domain admin group = @smbadmins cpatter sharriso ;Password Syncronization unix password sync = yes passwd program = /usr/local/bin/smbpasswd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authen tication*tokens*updated*successfully* pam password change = Yes #domain group map = /etc/samba/group.mapping #==Shares== [homes] comment = Home Directories browseable = no writable = yes admin users = @smbadmins [profiles] path = /home/samba/profiles guest ok = yes browseable = no read only = no create mask = 0600 directory mask = 0700 share modes = no ;nt acl support = no [netlogon] browseable = no path = /home/netlogon root preexec = perl /root/mklogonscript.pl %u %m %a [etime] path = /home/samba/etime browseable = no read only = yes create mask = 0660 directory mask = 0770 write list = @etime @smbadmins force group = etime admin users = acline bob bmyers [financials] path = /home/samba/financials create mask = 0660 directory mask = 0770 browseable = no read only = yes write list = @financials @smbadmins admin users = acline bob bmyers force group = financials [123work] path = /home/samba/lotus create mask = 0660 directory mask = 0770 browseable = no read only = yes write list = @lotus @smbadmins admin users = @smbadmins force group = lotus [vp10] path = /home/samba/vp10 create mask = 0660 directory mask = 0770 browseable = no read only = yes write list = @vp10 @smbadmins admin users = @smbadmins force group = vp10 [mrms] path = /home/samba/mrms create mask = 0660 directory mask = 0770 browseable = no read only = yes write list = @mrms @smbadmins admin users = @smbadmins force group = mrms [product] path = /home/samba/product create mask = 0660 directory mask = 0770 browseable = no read only = yes write list = @product @smbadmins admin users = @smbadmins force group = product [software] path = /home/samba/software create mask = 0660 directory mask = 0770 browseable = no read only = yes write list = @smbadmins admin users = @smbadmins force group = smbadmins [backup] path = /
Re: [Samba] deleting symlinks only
sorry antonio - i did not know, that u use unix clients... i've tested it on my linux box... following interresting situation: 1) i've created a directory "/test", there i putted in a file "data.1" 2) i've created a symbolic link "test" in a directory "/net/win/data", which results in a samba share "netdata". 3) i mounted //localhost/netdata to /ttt 4) now i tested: - if my actual directory was "/net/win/data", linux checked, that "test" was a symbolic link. => i could delete test without problems. (e.g. rm ./test => ok) - if my actual directory was "/ttt", linux thought that test is a directory!!! (as u descripted) (e.g. rm ./test => "could not delete, test is a directory") - *but* if my actual directory is *not* /net/win/data (e.g. /home) and i look to "/net/win/data/", linux *also* thinks, that test is a directory!!! (e.g. rm /net/win/data/test => "could not delete, test is a directory") result: linux *only* recognizes the symbolic link, when you stand in the original directory!! (no matter if the access is with samba or not) so i think, it's a problem of the filesystem/linux/unix, and not from samba. i don't know if it's the same on your unix system, but i think so. so again please: excuse my "stupid answer" cause i thought, that all users work over windows clients. mea culpa big guru ;-) and greetings from tyrol to germany... Antonio Nikolic schrieb: thank you, kurt hello list hello samba-team well, maybe for most application this workaround would work. But from the unix-point of view replacing a symbolic link with a windows-link is like replacing a car with a donkey... Why should someone create a symlink on a sambaserver which let's say is used by windowsclients only, if one just could have created a windows-link even more easily. It's the total difference between both. With a unix-link, you don't have to worry whether your application is able to follow windows-links the way you expect it, it simply works, and you don't need to maintain additional shares, it's accessrights etc - ok, but this is not the point [this indeed could be extended to a debate on principles ;-) ] The point is, that sometimes you just effectively need directories and no links, but there is no way to copy stuff - as it is in our case: the samba-server is a former nfs-server and the application running on windows formerly used to run on IRIX and now was ported to windows using hummingbird (btw.: the app. now beats the expensive SGIs in speed immensively), which means that in fact it still is a unix-application which has no idea of how to treat windows-links. So: Is there not a way, to teach samba (maybe in a future-release) to first check on recieving a deletion request whether or not a directory possibly is a link and delete the link only? One could introduce an per-share-option which allows to switch on this feature. I doubt this could be that hard to realize, is it? greetings Antonio Nikolic Kurt, Tuesday, February 04, 2003, 1:40:09 PM: == Antonio Nikolic wrote: hello list, is it possible to delete a symlinked directory over a samba-share, without deleting it's content but leaving the link-target as it is and deleting the symlink only? If I interpret samba's behaviour correctly, on deletion samba does not recognize the link as a link but as a directory, descends into it and deletes the the problem is, that the client does not recognize, that this is only a link: the files in there will be deleted *first*. then it deletes the link... but u can try a workaround (e.g.): u have a directory "all" and a share "home". u want to point from all homes to "all": create a share "all" in samba. - then create a link in *windows* to \\\all this link u copy to all "home" shares. - the client can change to "all", but if he deletes the link - nothing will happen... disadvantage: he only comes back with the "back" button in his browser, not with the "up" button. i hope it helped gk content recursively, finally tries to delete the directory which is none and stops. So all what is left in the end, is an empty directory and a link pointing to it... Setting the userpermissions is no solution for us as users have to have full access to the content. We are using samba 2.2.7a on IRIX. The symlinked directories are used as libraries, which are being linked to from different project-directories. If a project is finished, the link to the libraries must be deleted by the users. any hint would be helpful, thx Antonio Nikolic eMail: [EMAIL PROTECTED] [EMAIL PROTECTED] Internet: http://www.ibk-consult.com IBK Ingenieurconsult für Maschinenbau GmbH Kornstr. 17-21 30167 Hannover == -- To unsubscribe from this list go to the following
[Samba] Samba 2.2.7a / XP / Printing
Hi, I have a number of printers set up under Samba on a Linux box, using the default spoolss mode. We are experiencing a number of problems with printing, and I would like to eliminate the unnecessary step of spooling on the client (as I suspect this may cure some/all of them). For some reason however, when I go to the advanced properties on the printer driver dialog on the client, and select "Print directly to printer", although the options appears to set, when I re-enter the dialog, it has reverted back to spooling. FWIW, I am a domain admin on the network which is specified in the printer admins line in my smb.conf, and I do not understand why this problem is caused by printers shared from Samba - surely the spooling setting is a client thing, nothing to do with the printer server?! None the less, this problem is consistent and unique to the samba printers. Any advice would be greatly appreciated. Matthew. PS. Apologies to anybody reading the newsgroups for the duplicate post, but I only twigged too late that all the posts had come through this mailing list. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SMBMOUNT Performance between RedHat and SuSE
Hi All, I've got a machine that is acting as my backup server which I call "Valykyrie". Up until this weekend, this machine was running RedHat 7.3 and Samba 2.2.5. Because of some "political issues", I was forced to rebuild the machine with SuSE 8.1 Professional and Samba 2.2.5. Since the time of the machine coming online with SuSE on Sunday afternoon, my backup process has been running about 4 hours longer than normal. What I have happening is, through a script, Valykyrie mounts the administrative shares of a server's hard drive, copies the data local, compares the data and then moves on to the next drive or the next server and starts over - as shown here: mount -t smbfs -o username="domain_name\admin_username",password= \ //machine-name/sharename$ /mnt/mount-point cp -a /mnt/mount-point/ /backup diff -r brief /backup/mount-point /mnt/mount-point unmount /mnt/mount-point This cycle repeats for each required share on each server. This amounts to about 45GB of data a night. This used to take 8 hours total, now it's taking nearly 12. Nothing changed hardware-wise or in my script, only the distro. Could just the change to SuSE cause this much of a performance loss? Is there anything I can do to increase the performance? I'm not looking for huge improvements, but I need these additional 4 hours back so that my users aren't working on data while the backup is taking place. Thanks, Kevin L. Collins, MCSE Systems Manager Nesbitt Engineering, Inc. (859) 233-3111 x24 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Not able to login to Samba PDC
On Tuesday, February 04, 2003 9:59 PM John H Terpstra <[EMAIL PROTECTED]> wrote: > On Tue, 4 Feb 2003, Manjunath H N wrote: > >> Hello All, >> >> I am getting this error when I try to join my Win2K m/c to Samba, >> >> Windows cannot log you on because the profile cannot be loaded. >> Contact your network administrator. > > Send me your smb.conf off-line. I'll check it out. This is my smb.conf file # Global parameters [global] workgroup = MYGROUP netbios name = SERVER server string = Samba Server encrypt passwords = Yes obey pam restrictions = Yes pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* password level = 23 username level = 23 unix password sync = Yes log file = /var/log/samba/%m.log max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 load printers = No domain admin group = root add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u delete user script = /usr/sbin/userdel %u logon path = \\%L\profiles\%a\%U logon home = \\%L\%U\.profiles domain logons = Yes os level = 64 preferred master = True domain master = True dns proxy = No wins server = 192.168.2.253 winbind uid = 500-1000 winbind gid = 500-1000 admin users = root administrator printing = lprng [homes] comment = Home Directories # valid users = %S read only = No create mask = 0664 directory mask = 0775 browseable = No [netlogon] comment = Logon Scripts & Policies path = /home/netlogon create mask = 0644 directory mask = 0755 writeable = no guest ok = no [profiles] comment = Profiles Directory path = /home/profiles read only = No create mask = 0700 directory mask = 0700 nt acl support = No [home] comment = Home Directories path = /home valid users = administrator root read only = No > Plus you need to have a NETLOGON share that is world readable. > It is a good idea to add a logon script to pre-set printer and > drive connections. There is also a facility for automatically > synchronizing the workstation time clock with that of the logon > server (another good thing to do). [manjunath@server home]$ ll total 44 drwx-- 3 administrator administrator 4096 Jan 28 12:01 administrator drwx-- 6 manjunath manjunath 4096 Feb 4 21:53 manjunath drwxrwxr-x2 root root 4096 Feb 4 13:21 netlogon drwxrwxrwt4 root root 4096 Feb 4 21:43 profiles > Secondly, for roaming profiles you need: > > logon path = \\%N\profiles\%U (with some such path) > logon drive = H: (Z: is the default) > > Plus you need a PROFILES share that is world writable. It has been done >> Please help me I am totally lost with this error from past two days >> I tried everything & googled around quite a bit but of no help. >> Please help me. > > I hope this helps you. > > - John T. Awaiting more help from you. -- Manjunath DISCLAIMER: This e-mail and any attachment (s) is for authorised use by the intended recipient (s) only. It may contain proprietary material, confidential information and/or be subject to the legal privilege of iWave Systems Technologies Private Limited. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from retaining, using, copying, alerting or disclosing the content of this message. Thank you for your co-operation. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] some permissions issues
On Tue, 4 Feb 2003, CPDead wrote:
> I´m facing some troubles with file / directory permissions...
>
> I log on the domain as admin user(root), and theres a pub share, on witch
> everyone needs to have permission to create / modify files, but when I
> change or create a file, only root can change the file, no one else. And
> then i need to go to server to chgrp users * -R and chown nobody * -R to
> allow others users to change the file.
>
> can someone give-me a clue with this ?
1. Go to the top of the directory that is shared.
2. Set the ownership to what ever public owner and group you want.
Do:
find 'directory_name' -type d -exec chown user.group {}\;
find 'directory_name' -type d -exec chmod 6775 'directory_name'
find 'directory_name' -type f -exec chmod 0775 {} \;
find 'directory_name' -type f -exec chown user.group {}\;
Note: The above will set the 'sticky bit' on all directories. Read you
Unix/Linux man page on what that does. It causes the OS to assign to all
files created in the directories the ownership of the directory.
Example:
Directory is: /foodbar
chown jack.engr /foodbar
Note: This is the same as doing:
chown jack /foodbar
chgrp engr /foodbar
Now do:
chmod 6775 /foodbar
ls -al /foodbar/..
You should see:
drwsrwsr-x2 jack engr 48 2003-02-04 09:55 foodbar
Now:
su - jill
cd /foodbar
touch Afile
ls -al
You should see that the file 'Afile' created by Jill will have ownership
and permissions of Jack, as follws:
-rw-r--r--1 jack engr0 2003-02-04 09:57 Afile
4. Now in your smb.conf for the share add:
force create mode = 0775
force direcrtory mode = 6775
Note: The above are only needed IF your users are NOT members of the group
you have used. ie: Within the OS do not have write permission on the
directory.
An alternative is to set on the smb.conf entry for the share:
force user = jack
force group = engr
I hope this helps.
- John T.
--
John H Terpstra
Email: [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Not able to login to Samba PDC
Also with the same settings & Roaming profiles enabled I can log onto the server from a NT & 98 m/c but only Win2K m/c I am getting the following error Windows cannot log you on because the profile cannot be loaded. Contact your network administrator. DETAIL - The system cannot find the file specified. On Tuesday, February 04, 2003 10:42 PM Manjunath H N <[EMAIL PROTECTED]> wrote: > On Tuesday, February 04, 2003 9:59 PM > John H Terpstra <[EMAIL PROTECTED]> wrote: > >> On Tue, 4 Feb 2003, Manjunath H N wrote: >> >>> Hello All, >>> >>> I am getting this error when I try to join my Win2K m/c to Samba, >>> >>> Windows cannot log you on because the profile cannot be loaded. >>> Contact your network administrator. >> >> Send me your smb.conf off-line. I'll check it out. > > This is my smb.conf file > > # Global parameters > [global] > workgroup = MYGROUP > netbios name = SERVER > server string = Samba Server > encrypt passwords = Yes > obey pam restrictions = Yes > pam password change = Yes > passwd program = /usr/bin/passwd %u > passwd chat = *New*password* %n\n *Retype*new*password* %n\n > *passwd:*all*authentication*tokens*updated*successfully* > password level = 23 > username level = 23 > unix password sync = Yes > log file = /var/log/samba/%m.log > max log size = 50 > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > load printers = No > domain admin group = root > add user script = /usr/sbin/useradd -d /dev/null -g 100 -s > /bin/false -M %u > delete user script = /usr/sbin/userdel %u > logon path = \\%L\profiles\%a\%U > logon home = \\%L\%U\.profiles > domain logons = Yes > os level = 64 > preferred master = True > domain master = True > dns proxy = No > wins server = 192.168.2.253 > winbind uid = 500-1000 > winbind gid = 500-1000 > admin users = root administrator > printing = lprng > > [homes] > comment = Home Directories > # valid users = %S > read only = No > create mask = 0664 > directory mask = 0775 > browseable = No > > [netlogon] > comment = Logon Scripts & Policies > path = /home/netlogon > create mask = 0644 > directory mask = 0755 > writeable = no > guest ok = no > > [profiles] > comment = Profiles Directory > path = /home/profiles > read only = No > create mask = 0700 > directory mask = 0700 > nt acl support = No > > [home] > comment = Home Directories > path = /home > valid users = administrator root > read only = No > >> Plus you need to have a NETLOGON share that is world readable. >> It is a good idea to add a logon script to pre-set printer and >> drive connections. There is also a facility for automatically >> synchronizing the workstation time clock with that of the logon >> server (another good thing to do). > > [manjunath@server home]$ ll > total 44 > drwx-- 3 administrator administrator 4096 Jan 28 > 12:01 administrator > drwx-- 6 manjunath manjunath 4096 Feb 4 > 21:53 manjunath > drwxrwxr-x2 root root 4096 Feb > 4 13:21 netlogon > drwxrwxrwt4 root root 4096 Feb > 4 21:43 profiles > > >> Secondly, for roaming profiles you need: >> >> logon path = \\%N\profiles\%U (with some such path) >> logon drive = H: (Z: is the default) >> >> Plus you need a PROFILES share that is world writable. > > It has been done > >>> Please help me I am totally lost with this error from past two days >>> I tried everything & googled around quite a bit but of no help. >>> Please help me. >> >> I hope this helps you. >> >> - John T. > Awaiting more help from you. > > -- Manjunath DISCLAIMER: This e-mail and any attachment (s) is for authorised use by the intended recipient (s) only. It may contain proprietary material, confidential information and/or be subject to the legal privilege of iWave Systems Technologies Private Limited. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from retaining, using, copying, alerting or disclosing the content of this message. Thank you for your co-operation. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] configuration help
Dear I install linux 8 in one system and samba also enabled more over I edit registery in my win98 system I can see linux mechin in windows network neighborhood when I am opening the system It is not opening it is giving error lilke the computer in not in this net work ( the ip address of the linux is 172.16.10.123 , the windows ip address is 172.16.10.132) the class is same sir what will be the error pleas help me sir my e - mail id is [EMAIL PROTECTED] [EMAIL PROTECTED] by from sukkur .k.m - Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] LINUX NFS Shares Question
I have a Red Hat 7.2 system running Samba 2.2.5-1. Prior to installing Samba, I had established two NFS shares to a SGI O2 (IRIX 6.5.10). With Samba resident I can no longer access these two NFS shares from the SGI system, nor can I establish any new NFS shares to the SGI system. I have tried too many things to list in trying to resolve this issue and I'm sure one of you has a simple solution to this problem. Thanks, Steve -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Runtime error
As a guess, I would say you do not have locales support (completely) installed in your distro. In Debian, you would enter at the prompt: # dpkg-reconfigure locales and add in other locales like UTF-8, etc. for your language. HTH -- Christopher Barry Manager of Information Systems InfiniCon Systems http://www.infiniconsys.com office: 610.233.4747 direct: 610.233.4870 cell: 267.879.8321 -Original Message- From: Sajesh Singh [mailto:[EMAIL PROTECTED]] Sent: Monday, February 03, 2003 5:08 PM To: [EMAIL PROTECTED] Subject: [Samba] Runtime error Compiled 3.0alpha22cvs on solaris 8 with ads and winbind support getting the following errors # ./net ads testjoin [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from UCS-2LE to CP850 not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from UTF8 to CP850 not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from ASCII to CP850 not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UCS-2LE not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UTF8 not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to ASCII not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UTF8 not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from UTF8 to CP850 not supported ADS support not compiled in Anyone have an idea as to how to remedy Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] query on security = server, domain
On Tue, 4 Feb 2003, akshaysalkar wrote: > if Win NT is acting as a PDC, and Samba is added in the network, then when would it >be required to put > security = server > when > security = domain > already exists. > in other words why have security = server > when security = domain can be put. Please note: "security = server" means: The samba server is NOT a domain controller. The samba server is NOT a member of the domain it is going to authenticate against. The samba server will NOT provide domain logon services. It also means that the samba server has to use a nasty method to work around bugs that are present in some versions of MS Windows NT servers. This method is necessary to prevent a potential security breach that could otherwise give un-authorized root access on a samba share. "security = domain" means: The samba server is a MEMBER of a domain. It does NOT mean that samba is a domain controller - it is NOT a domain controller is set this way. Samba therefore does NOT perform domain logons for users. This configuration does NOT require the nasty bug work-around that the "security = server" option needs. This mode DOES require that the samba machine has an account on the MS Windows NT/2K security domain (either NT4 style or ADS). With Samba-2.2.x series your Windows 2000 ADS server needs to run in "Mixed" or "Hybrid" mode otherwise Samba can not join the ADS security domain. With Samba-3.0.0alpha releases samba can join a "Native" mode ADS domain. I hope this helps. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Runtime error
That makes sense, but what about the last line of the error showing that ADS support is not compiled ? -Original Message- From: Barry, Christopher [mailto:[EMAIL PROTECTED]] Sent: Tue 2/4/2003 12:16 PM To: Sajesh Singh; [EMAIL PROTECTED] Cc: Subject:RE: [Samba] Runtime error As a guess, I would say you do not have locales support (completely) installed in your distro. In Debian, you would enter at the prompt: # dpkg-reconfigure locales and add in other locales like UTF-8, etc. for your language. HTH -- Christopher Barry Manager of Information Systems InfiniCon Systems http://www.infiniconsys.com office: 610.233.4747 direct: 610.233.4870 cell: 267.879.8321 -Original Message- From: Sajesh Singh [mailto:[EMAIL PROTECTED]] Sent: Monday, February 03, 2003 5:08 PM To: [EMAIL PROTECTED] Subject: [Samba] Runtime error Compiled 3.0alpha22cvs on solaris 8 with ads and winbind support getting the following errors # ./net ads testjoin [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from UCS-2LE to CP850 not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from UTF8 to CP850 not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from ASCII to CP850 not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UCS-2LE not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UTF8 not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to ASCII not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UTF8 not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from UTF8 to CP850 not supported ADS support not compiled in Anyone have an idea as to how to remedy Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] spurious domian login problems
On Tue, 4 Feb 2003, Urs Rau wrote: > We have a few win9x workstations, that have spurious login > problems. They get the message: I would seriously check my networking hardware: NIC's, wiring, HUBS. Also: Make sure you are using WINS for name resolution. Your symptoms look like network timing problems or like bad packet problems. You might use a sniffer (like ethereal) to capture the logon sequence. Examine the trace of a good logon and a failed one to see what specific bits of information were bad in the lead up to the failed logon. Keep a close check on the timings between events. It may help to locate the cause. - John T. > No domain server was available to validate your password you > may not be able to gain access to some network resources. > > The passwords are definetly correct and the problem will > sometimes disappear after 5 - 10 retries, but almost always after > a full restart of the win9x PC, very occasionally it takes as many > as 5 reboots before it logs in to the domina again. > > All I can find in the log.nmbd file around that time is > a "code = 0x0" returned instead of the usual 0x12 or 0x7. Does > this give anybody a clue as to what is going on. Or is looking at > log.nmbd a waste of time. I simply can't find an entry that would > be relevant in the log.smbd around that time. > > I am running at loglevel 3 how high should I go to get more details > to help debug this problem? > > successfull logins appear to have either code 0x12 or 0x7 and > only the failed logins appear to have code 0x0. > > [2003/01/11 18:32:20, 1] > nmbd/nmbd_processlogon.c:process_logon_packet(70) > process_logon_packet: Logon from 192.168.1.122: code = 0x12 > > [2003/01/11 17:22:21, 1] > nmbd/nmbd_processlogon.c:process_logon_packet(70) > process_logon_packet: Logon from 192.168.1.26: code = 0x7 > > > [2003/01/04 11:51:06, 1] > nmbd/nmbd_processlogon.c:process_logon_packet(70) > process_logon_packet: Logon from 192.168.1.197: code = 0x0 > > Any help appreciated. > > Urs RAU > > Head of Information Services OM UK HeadQuarters > + > | Operation Mobilisation, The Quinta, Weston Rhyn, OSWESTRY | > | SY10 7lT, UK, FAX: +44-1691-778378, TEL: +44-1691-773388 | > | Email: [EMAIL PROTECTED] | > +---+ > -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Runtime error
My guess is that the other errors prevented it from compiling correctly. -- Christopher Barry Manager of Information Systems InfiniCon Systems http://www.infiniconsys.com office: 610.233.4747 direct: 610.233.4870 cell: 267.879.8321 -Original Message- From: Sajesh Singh [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 04, 2003 12:23 PM To: [EMAIL PROTECTED] Subject: RE: [Samba] Runtime error That makes sense, but what about the last line of the error showing that ADS support is not compiled ? -Original Message- From: Barry, Christopher [mailto:[EMAIL PROTECTED]] Sent: Tue 2/4/2003 12:16 PM To: Sajesh Singh; [EMAIL PROTECTED] Cc: Subject:RE: [Samba] Runtime error As a guess, I would say you do not have locales support (completely) installed in your distro. In Debian, you would enter at the prompt: # dpkg-reconfigure locales and add in other locales like UTF-8, etc. for your language. HTH -- Christopher Barry Manager of Information Systems InfiniCon Systems http://www.infiniconsys.com office: 610.233.4747 direct: 610.233.4870 cell: 267.879.8321 -Original Message- From: Sajesh Singh [mailto:[EMAIL PROTECTED]] Sent: Monday, February 03, 2003 5:08 PM To: [EMAIL PROTECTED] Subject: [Samba] Runtime error Compiled 3.0alpha22cvs on solaris 8 with ads and winbind support getting the following errors # ./net ads testjoin [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from UCS-2LE to CP850 not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from UTF8 to CP850 not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from ASCII to CP850 not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UCS-2LE not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UTF8 not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to ASCII not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UTF8 not supported [2003/02/03 17:00:54, 0] lib/charcnv.c:init_iconv(93) Conversion from UTF8 to CP850 not supported ADS support not compiled in Anyone have an idea as to how to remedy Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] File log
On Tue, 4 Feb 2003, Frank Nørvig wrote: > Hello, > > Is it possible to log changes in files on a samba-server? > I need to log which changes users do in shared folders to track if someone > is deleting, changing or creating files. > > Is this possible? Yes. It is possible. You need to use a recent version of samba (2.2.7a is the latest) that has been built with the VFS modules enabled. You then need to install the audit.so module on the share that you want to audit. The options that control this are: vfs object = /usr/lib/samba/audit.so >From the README on this module: audit A simple module to audit file access to the syslog facility. The following operations are logged: share connect/disconnect, directory opens/create/remove, file open/close/rename/unlink/chmod. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Not able to login to Samba PDC
Hi, Maybe permission in W2K, I had this problem and decided here making right permissions... Clovis Manjunath H N wrote: Also with the same settings & Roaming profiles enabled I can log onto the server from a NT & 98 m/c but only Win2K m/c I am getting the following error Windows cannot log you on because the profile cannot be loaded. Contact your network administrator. DETAIL - The system cannot find the file specified. On Tuesday, February 04, 2003 10:42 PM Manjunath H N <[EMAIL PROTECTED]> wrote: On Tuesday, February 04, 2003 9:59 PM John H Terpstra <[EMAIL PROTECTED]> wrote: On Tue, 4 Feb 2003, Manjunath H N wrote: Hello All, I am getting this error when I try to join my Win2K m/c to Samba, Windows cannot log you on because the profile cannot be loaded. Contact your network administrator. Send me your smb.conf off-line. I'll check it out. This is my smb.conf file # Global parameters [global] workgroup = MYGROUP netbios name = SERVER server string = Samba Server encrypt passwords = Yes obey pam restrictions = Yes pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* password level = 23 username level = 23 unix password sync = Yes log file = /var/log/samba/%m.log max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 load printers = No domain admin group = root add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u delete user script = /usr/sbin/userdel %u logon path = \\%L\profiles\%a\%U logon home = \\%L\%U\.profiles domain logons = Yes os level = 64 preferred master = True domain master = True dns proxy = No wins server = 192.168.2.253 winbind uid = 500-1000 winbind gid = 500-1000 admin users = root administrator printing = lprng [homes] comment = Home Directories # valid users = %S read only = No create mask = 0664 directory mask = 0775 browseable = No [netlogon] comment = Logon Scripts & Policies path = /home/netlogon create mask = 0644 directory mask = 0755 writeable = no guest ok = no [profiles] comment = Profiles Directory path = /home/profiles read only = No create mask = 0700 directory mask = 0700 nt acl support = No [home] comment = Home Directories path = /home valid users = administrator root read only = No Plus you need to have a NETLOGON share that is world readable. It is a good idea to add a logon script to pre-set printer and drive connections. There is also a facility for automatically synchronizing the workstation time clock with that of the logon server (another good thing to do). [manjunath@server home]$ ll total 44 drwx-- 3 administrator administrator 4096 Jan 28 12:01 administrator drwx-- 6 manjunath manjunath 4096 Feb 4 21:53 manjunath drwxrwxr-x2 root root 4096 Feb 4 13:21 netlogon drwxrwxrwt4 root root 4096 Feb 4 21:43 profiles Secondly, for roaming profiles you need: logon path = \\%N\profiles\%U (with some such path) logon drive = H: (Z: is the default) Plus you need a PROFILES share that is world writable. It has been done Please help me I am totally lost with this error from past two days I tried everything & googled around quite a bit but of no help. Please help me. I hope this helps you. - John T. Awaiting more help from you. -- Manjunath DISCLAIMER: This e-mail and any attachment (s) is for authorised use by the intended recipient (s) only. It may contain proprietary material, confidential information and/or be subject to the legal privilege of iWave Systems Technologies Private Limited. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from retaining, using, copying, alerting or disclosing the content of this message. Thank you for your co-operation. -- Clovis Tristao - UNICAMP/Faculdade de Engenharia Agricola E-mail: mailto:[EMAIL PROTECTED] http://www.agr.unicamp.br Fone(0xx19) 37881031-37881038 ou FAX(55xx19) 37881010 _|_|_|_|_| _|_|_| _|_|_|_|_|_| _| _|_| (o- _|_|_| _|_|_|_| _|_| _|_| _|_| _| //\ _| _|_|_| _|_| _|_| V_/_ _|_|_|_|_|_|_|_|_|_| _|_| _| -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/
Re: [Samba] Not able to login to Samba PDC
On Tue, 4 Feb 2003, Manjunath H N wrote: > > > Also with the same settings & Roaming profiles enabled I can log onto the > server from a NT & 98 m/c but only Win2K m/c I am getting the following > error I suspect the problem is with your use of the %a variable. Suggest you NOT use that. - John T. > > Windows cannot log you on because the profile cannot be loaded. Contact your > network administrator. > > DETAIL - The system cannot find the file specified. > > > > On Tuesday, February 04, 2003 10:42 PM > Manjunath H N <[EMAIL PROTECTED]> wrote: > > > On Tuesday, February 04, 2003 9:59 PM > > John H Terpstra <[EMAIL PROTECTED]> wrote: > > > >> On Tue, 4 Feb 2003, Manjunath H N wrote: > >> > >>> Hello All, > >>> > >>> I am getting this error when I try to join my Win2K m/c to Samba, > >>> > >>> Windows cannot log you on because the profile cannot be loaded. > >>> Contact your network administrator. > >> > >> Send me your smb.conf off-line. I'll check it out. > > > > This is my smb.conf file > > > > # Global parameters > > [global] > > workgroup = MYGROUP > > netbios name = SERVER > > server string = Samba Server > > encrypt passwords = Yes > > obey pam restrictions = Yes > > pam password change = Yes > > passwd program = /usr/bin/passwd %u > > passwd chat = *New*password* %n\n *Retype*new*password* %n\n > > *passwd:*all*authentication*tokens*updated*successfully* > > password level = 23 > > username level = 23 > > unix password sync = Yes > > log file = /var/log/samba/%m.log > > max log size = 50 > > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > > load printers = No > > domain admin group = root > > add user script = /usr/sbin/useradd -d /dev/null -g 100 -s > > /bin/false -M %u > > delete user script = /usr/sbin/userdel %u > > logon path = \\%L\profiles\%a\%U > > logon home = \\%L\%U\.profiles > > domain logons = Yes > > os level = 64 > > preferred master = True > > domain master = True > > dns proxy = No > > wins server = 192.168.2.253 > > winbind uid = 500-1000 > > winbind gid = 500-1000 > > admin users = root administrator > > printing = lprng > > > > [homes] > > comment = Home Directories > > # valid users = %S > > read only = No > > create mask = 0664 > > directory mask = 0775 > > browseable = No > > > > [netlogon] > > comment = Logon Scripts & Policies > > path = /home/netlogon > > create mask = 0644 > > directory mask = 0755 > > writeable = no > > guest ok = no > > > > [profiles] > > comment = Profiles Directory > > path = /home/profiles > > read only = No > > create mask = 0700 > > directory mask = 0700 > > nt acl support = No > > > > [home] > > comment = Home Directories > > path = /home > > valid users = administrator root > > read only = No > > > >> Plus you need to have a NETLOGON share that is world readable. > >> It is a good idea to add a logon script to pre-set printer and > >> drive connections. There is also a facility for automatically > >> synchronizing the workstation time clock with that of the logon > >> server (another good thing to do). > > > > [manjunath@server home]$ ll > > total 44 > > drwx-- 3 administrator administrator 4096 Jan 28 > > 12:01 administrator > > drwx-- 6 manjunath manjunath 4096 Feb 4 > > 21:53 manjunath > > drwxrwxr-x2 root root 4096 Feb > > 4 13:21 netlogon > > drwxrwxrwt4 root root 4096 Feb > > 4 21:43 profiles > > > > > >> Secondly, for roaming profiles you need: > >> > >> logon path = \\%N\profiles\%U (with some such path) > >> logon drive = H: (Z: is the default) > >> > >> Plus you need a PROFILES share that is world writable. > > > > It has been done > > > >>> Please help me I am totally lost with this error from past two days > >>> I tried everything & googled around quite a bit but of no help. > >>> Please help me. > >> > >> I hope this helps you. > >> > >> - John T. > > Awaiting more help from you. > > > > -- Manjunath > > > > > DISCLAIMER: > > This e-mail and any attachment (s) is for authorised use by the intended recipient >(s) only. It may contain proprietary material, confidential information and/or be >subject to the legal privilege of iWave Systems Technologies Private Limited. If you >have received this message in error, please notify the originator immediately. If you >are not the intended recipient, you are notified that you are strictly prohibited >from retaining, using, copying, alerting or disclosing the content of this message. >Thank you for your co-operation. > -- John H Terpstra Email: [EM
Re: [Samba] Not able to login to Samba PDC
On Tuesday, February 04, 2003 11:28 PM John H Terpstra <[EMAIL PROTECTED]> wrote: > On Tue, 4 Feb 2003, Manjunath H N wrote: > >> >> >> Also with the same settings & Roaming profiles enabled I can log >> onto the >> server from a NT & 98 m/c but only Win2K m/c I am getting the >> following >> error > > I suspect the problem is with your use of the %a variable. Suggest > you NOT > use that. > > - John T. I removed the %a variable but still No luck still same error. -- Manjunath >> Windows cannot log you on because the profile cannot be loaded. >> Contact your >> network administrator. >> >> DETAIL - The system cannot find the file specified. >> >> >> >> On Tuesday, February 04, 2003 10:42 PM >> Manjunath H N <[EMAIL PROTECTED]> wrote: >> >>> On Tuesday, February 04, 2003 9:59 PM >>> John H Terpstra <[EMAIL PROTECTED]> wrote: >>> On Tue, 4 Feb 2003, Manjunath H N wrote: > Hello All, > > I am getting this error when I try to join my Win2K m/c to Samba, > > Windows cannot log you on because the profile cannot be loaded. > Contact your network administrator. Send me your smb.conf off-line. I'll check it out. >>> >>> This is my smb.conf file >>> >>> # Global parameters >>> [global] >>> workgroup = MYGROUP >>> netbios name = SERVER >>> server string = Samba Server >>> encrypt passwords = Yes >>> obey pam restrictions = Yes >>> pam password change = Yes >>> passwd program = /usr/bin/passwd %u >>> passwd chat = *New*password* %n\n *Retype*new*password* %n\n >>> *passwd:*all*authentication*tokens*updated*successfully* >>> password level = 23 >>> username level = 23 >>> unix password sync = Yes >>> log file = /var/log/samba/%m.log >>> max log size = 50 >>> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 >>> load printers = No >>> domain admin group = root >>> add user script = /usr/sbin/useradd -d /dev/null -g 100 -s >>> /bin/false -M %u >>> delete user script = /usr/sbin/userdel %u >>> logon path = \\%L\profiles\%a\%U >>> logon home = \\%L\%U\.profiles >>> domain logons = Yes >>> os level = 64 >>> preferred master = True >>> domain master = True >>> dns proxy = No >>> wins server = 192.168.2.253 >>> winbind uid = 500-1000 >>> winbind gid = 500-1000 >>> admin users = root administrator >>> printing = lprng >>> >>> [homes] >>> comment = Home Directories >>> # valid users = %S >>> read only = No >>> create mask = 0664 >>> directory mask = 0775 >>> browseable = No >>> >>> [netlogon] >>> comment = Logon Scripts & Policies >>> path = /home/netlogon >>> create mask = 0644 >>> directory mask = 0755 >>> writeable = no >>> guest ok = no >>> >>> [profiles] >>> comment = Profiles Directory >>> path = /home/profiles >>> read only = No >>> create mask = 0700 >>> directory mask = 0700 >>> nt acl support = No >>> >>> [home] >>> comment = Home Directories >>> path = /home >>> valid users = administrator root >>> read only = No >>> Plus you need to have a NETLOGON share that is world readable. It is a good idea to add a logon script to pre-set printer and drive connections. There is also a facility for automatically synchronizing the workstation time clock with that of the logon server (another good thing to do). >>> >>> [manjunath@server home]$ ll >>> total 44 >>> drwx-- 3 administrator administrator 4096 Jan 28 >>> 12:01 administrator >>> drwx-- 6 manjunath manjunath 4096 Feb 4 >>> 21:53 manjunath >>> drwxrwxr-x2 root root 4096 >>> Feb 4 13:21 netlogon >>> drwxrwxrwt4 root root 4096 Feb >>> 4 21:43 profiles >>> >>> Secondly, for roaming profiles you need: logon path = \\%N\profiles\%U (with some such path) logon drive = H: (Z: is the default) Plus you need a PROFILES share that is world writable. >>> >>> It has been done >>> > Please help me I am totally lost with this error from past two > days > I tried everything & googled around quite a bit but of no help. > Please help me. I hope this helps you. - John T. >>> Awaiting more help from you. >>> >>> -- Manjunath >> >> >> >> >> DISCLAIMER: >> >> This e-mail and any attachment (s) is for authorised use by the >> intended recipient (s) only. It may contain proprietary material, >> confidential information and/or be subject to the legal privilege of >> iWave Systems Technologies Private Limited. If you have received >> this message in error, please notify the originator
Re: [Samba] Not able to login to Samba PDC
On Tuesday, February 04, 2003 11:13 PM Clovis Tristao <[EMAIL PROTECTED]> wrote: > Hi, > Maybe permission in W2K, I had this problem and decided here making > right permissions... > Clovis I did not get you could you explain in detail please about making right permissions -- Manjunath > Manjunath H N wrote: >> >> Also with the same settings & Roaming profiles enabled I can log >> onto the >> server from a NT & 98 m/c but only Win2K m/c I am getting the >> following >> error >> >> Windows cannot log you on because the profile cannot be loaded. >> Contact your >> network administrator. >> >> DETAIL - The system cannot find the file specified. >> >> >> >> On Tuesday, February 04, 2003 10:42 PM >> Manjunath H N <[EMAIL PROTECTED]> wrote: >> >> >>> On Tuesday, February 04, 2003 9:59 PM >>> John H Terpstra <[EMAIL PROTECTED]> wrote: >>> >>> On Tue, 4 Feb 2003, Manjunath H N wrote: > Hello All, > > I am getting this error when I try to join my Win2K m/c to Samba, > > Windows cannot log you on because the profile cannot be loaded. > Contact your network administrator. Send me your smb.conf off-line. I'll check it out. >>> >>> This is my smb.conf file >>> >>> # Global parameters >>> [global] >>>workgroup = MYGROUP >>>netbios name = SERVER >>>server string = Samba Server >>>encrypt passwords = Yes >>>obey pam restrictions = Yes >>>pam password change = Yes >>>passwd program = /usr/bin/passwd %u >>>passwd chat = *New*password* %n\n *Retype*new*password* %n\n >>> *passwd:*all*authentication*tokens*updated*successfully* >>>password level = 23 >>>username level = 23 >>>unix password sync = Yes >>>log file = /var/log/samba/%m.log >>>max log size = 50 >>>socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 >>>load printers = No >>>domain admin group = root >>>add user script = /usr/sbin/useradd -d /dev/null -g 100 -s >>> /bin/false -M %u >>>delete user script = /usr/sbin/userdel %u >>>logon path = \\%L\profiles\%a\%U >>>logon home = \\%L\%U\.profiles >>>domain logons = Yes >>>os level = 64 >>>preferred master = True >>>domain master = True >>>dns proxy = No >>>wins server = 192.168.2.253 >>>winbind uid = 500-1000 >>>winbind gid = 500-1000 >>>admin users = root administrator >>>printing = lprng >>> >>> [homes] >>>comment = Home Directories >>> # valid users = %S >>>read only = No >>>create mask = 0664 >>>directory mask = 0775 >>>browseable = No >>> >>> [netlogon] >>>comment = Logon Scripts & Policies >>>path = /home/netlogon >>>create mask = 0644 >>>directory mask = 0755 >>>writeable = no >>>guest ok = no >>> >>> [profiles] >>>comment = Profiles Directory >>>path = /home/profiles >>>read only = No >>>create mask = 0700 >>>directory mask = 0700 >>>nt acl support = No >>> >>> [home] >>>comment = Home Directories >>>path = /home >>>valid users = administrator root >>>read only = No >>> >>> Plus you need to have a NETLOGON share that is world readable. It is a good idea to add a logon script to pre-set printer and drive connections. There is also a facility for automatically synchronizing the workstation time clock with that of the logon server (another good thing to do). >>> >>> [manjunath@server home]$ ll >>> total 44 >>> drwx-- 3 administrator administrator 4096 Jan 28 >>> 12:01 administrator >>> drwx-- 6 manjunath manjunath 4096 Feb 4 >>> 21:53 manjunath >>> drwxrwxr-x2 root root 4096 >>> Feb 4 13:21 netlogon >>> drwxrwxrwt4 root root 4096 Feb >>> 4 21:43 profiles >>> >>> >>> Secondly, for roaming profiles you need: logon path = \\%N\profiles\%U (with some such path) logon drive = H: (Z: is the default) Plus you need a PROFILES share that is world writable. >>> >>> It has been done >>> >>> > Please help me I am totally lost with this error from past two > days > I tried everything & googled around quite a bit but of no help. > Please help me. I hope this helps you. - John T. >>> >>> Awaiting more help from you. >>> >>> -- Manjunath >> >> >> >> >> >> DISCLAIMER: >> >> This e-mail and any attachment (s) is for authorised use by the >> intended recipient (s) only. It may contain proprietary material, >> confidential information and/or be subject to the legal privilege of >> iWave Systems Technologies Private Limited. If you have received >> this message in error, please notify the originator immediately. If >> you are not the intended recipient, you are not
Re: [Samba] configuration help
Can you ping the Linux machine from the wndows machine... and the Windows machine from the Linux machine ? - Original Message - From: "sukkur abdul" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, February 04, 2003 3:16 PM Subject: [Samba] configuration help > > Dear > > I install linux 8 in one system and samba also enabled more over > > I edit registery in my win98 system I can see linux mechin in windows > > network neighborhood when I am opening the system It is not opening > > it is giving error lilke the computer in not in this net work ( the ip address of the linux is 172.16.10.123 , the windows ip address is 172.16.10.132) the class is same > > sir what will be the error pleas help me sir > > my e - mail id is [EMAIL PROTECTED] > > [EMAIL PROTECTED] > > by from > > sukkur .k.m > > > > - > Do you Yahoo!? > Yahoo! Mail Plus - Powerful. Affordable. Sign up now > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > > --- Outgoing mail is certified Virus Free. Scanned with Grisoft AVG 6.0. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.445 / Virus Database: 250 - Release Date: 21/01/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SWAT and Solaris 8
Hello out there! I have a little problem using SWAT (samba 2.2.7a) in a solaris environment. Everything works fine but when you try to start the samba-services, nothings happens. On the other hand, there is no problem to start these services from the commandline. Even stoping them with the SWAT-Tool is possible. Does anyone has an idea what's going wrong there? Thanks, Kai Kai Krieger-Juhnke VOLKSWAGEN BANK GMBH Postfach I-SBS Schmalbachstr. 1 D-38112 Braunschweig Tel.: +49 531 212-2098 FAX: +49 531 212-3842 email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Issues with Joining an NT4 Domain
Hello I'm having some dificulties joining my Samba 3.0alpha (and 2.2.7a) machine to my NT4 domain. Let me tell you what I'm attempting to accomplish. I want to setup the Samba system to authenticate to my NT domain so that I can use NTLM Proxy authentication with SQUID. Through reading the docs, I'm under the impression that in order to allow thre SQUID/Samba setup to auth on the domain, the NT PDC must show that the Samba machine is part of the domain. I've tried this with Samba 2.2.7a and the latest 3.0alpha with the same results. I'll include the commands I've used for the 3.0 tree, as this is what I've used most recently. My smb.conf: [global] security = DOMAIN domain logons = yes password server = QADOM workgroup = QADOM netbios name = clintbsd30a server string = FreeBSD with Samba 3.0 encrypt passwords = yes preferred master = no domain master = no utmp = yes add user script = /usr/sbin/pw adduser %u delete user script = /usr/sbin/pw deleteuser %u pam password change = yes I join the domain like this: # ./net join -U Administrator [2003/02/04 08:07:32, 1] rpc_client/cli_netlogon.c:cli_nt_setup_creds(300) cli_nt_setup_creds: auth2 challenge failed NT_STATUS_NO_TRUST_SAM_ACCOUNT [2003/02/04 08:07:32, 1] libsmb/trust_passwd.c:just_change_the_password(42) just_change_the_password: unable to setup creds (NT_STATUS_NO_TRUST_SAM_ACCOUNT)! [2003/02/04 08:07:32, 1] utils/net_rpc.c:run_rpc_command(154) rpc command function failed! (NT_STATUS_NO_TRUST_SAM_ACCOUNT) Joined domain QADOM. This, I think, is the root of the issue.. how can I have NT_STATUS_NO_TRUST_SAM_ACCOUNT and still be joined to the domain? The machine shows up in the NT Domain Machine Management program as a NT Backup. I've also tried adding the Machine manually to the NT domain first, then useing the net command to join it. after fireing up nmbd and smbd, and attempting to access the machine from the PDC's network neighborhood, I get this error on the PDC: The SAM Database on the Windows NT server does not have a computer account for this workstation trust relationship. and in the samba log files I get: [2003/02/04 07:48:30, 0] smbd/server.c:main(704) smbd version 3.0alpha21 started. Copyright Andrew Tridgell and the Samba Team 1992-2002 [2003/02/04 07:48:30, 0] smbd/server.c:main(738) standard input is not a socket, assuming -D option [2003/02/04 07:49:04, 1] rpc_client/cli_netlogon.c:cli_nt_setup_creds(300) cli_nt_setup_creds: auth2 challenge failed NT_STATUS_NO_TRUST_SAM_ACCOUNT [2003/02/04 07:49:04, 0] auth/auth_domain.c:connect_to_domain_password_server(216) connect_to_domain_password_server: unable to setup the PDC credentials to machine QA71B. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT. [2003/02/04 07:49:04, 1] rpc_client/cli_netlogon.c:cli_nt_setup_creds(300) cli_nt_setup_creds: auth2 challenge failed NT_STATUS_NO_TRUST_SAM_ACCOUNT [2003/02/04 07:49:04, 0] auth/auth_domain.c:connect_to_domain_password_server(216) connect_to_domain_password_server: unable to setup the PDC credentials to machine QA71B. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT. [2003/02/04 07:49:05, 1] rpc_client/cli_netlogon.c:cli_nt_setup_creds(300) cli_nt_setup_creds: auth2 challenge failed NT_STATUS_NO_TRUST_SAM_ACCOUNT [2003/02/04 07:49:05, 0] auth/auth_domain.c:connect_to_domain_password_server(216) connect_to_domain_password_server: unable to setup the PDC credentials to machine QA71B. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT. [2003/02/04 07:49:05, 0] auth/auth_domain.c:domain_client_validate(407) domain_client_validate: Domain password server not available. [2003/02/04 07:49:05, 1] rpc_client/cli_netlogon.c:cli_nt_setup_creds(300) cli_nt_setup_creds: auth2 challenge failed NT_STATUS_NO_TRUST_SAM_ACCOUNT [2003/02/04 07:49:05, 0] auth/auth_domain.c:connect_to_domain_password_server(216) connect_to_domain_password_server: unable to setup the PDC credentials to machine QA71B. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT. [2003/02/04 07:49:06, 1] rpc_client/cli_netlogon.c:cli_nt_setup_creds(300) cli_nt_setup_creds: auth2 challenge failed NT_STATUS_NO_TRUST_SAM_ACCOUNT [2003/02/04 07:49:06, 0] auth/auth_domain.c:connect_to_domain_password_server(216) connect_to_domain_password_server: unable to setup the PDC credentials to machine QA71B. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT. [2003/02/04 07:49:06, 1] rpc_client/cli_netlogon.c:cli_nt_setup_creds(300) cli_nt_setup_creds: auth2 challenge failed NT_STATUS_NO_TRUST_SAM_ACCOUNT [2003/02/04 07:49:06, 0] auth/auth_domain.c:connect_to_domain_password_server(216) connect_to_domain_password_server: unable to setup the PDC credentials to machine QA71B. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT. [2003/02/04 07:49:06, 0] auth/auth_domain.c:domain_client_validate(407) domain_client_validate: Domain password server not available. so I guess my question is, what am I
Re: [Samba] Logon time restrictions; change ownership via samba
On Tue, Feb 04, 2003 at 07:30:38AM -0800, Shawn Wright wrote: > Are there plans to support logon time restrictions in Samba, or is it > somehow supported already? We are using an NT4 PDC, and would like > the samba servers to disconnect users outside of their logon times. This is planned for 3.0 natively, and can be emulated in 2.2 by using the "obey pam restrictions" parameter (although I think this only applies to logons, and won't disconnect after logon times have expired I think). > Also, is there any way to allow one to change file ownership via samba? I > have not found any way to do this. We would like domain admins to have > this ability so that we can maintain file ownership & permissions from NT > boxes to allow quotas to be correctly managed on the samba boxes. > Currently files copied/moved to a user share on the samba box keep the > ownership of the user performing the move. Domain admins need the > ability to change ownership/permissions to that of a specific user. mapping domain admins to root on the box will allow this. Not sure you want to do this though... Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Group Policy
Hello All, I have 12 XP Pro clients logging into my Samba 2.2.7 PDC :-) Roving profiles run OK but I want to get a little more control over the users to stop some of the annoying issues. I have read around and understand that if it was a Win2K server I would use 'Group Policies' to control the clients and I have looked at the mmc for group policies. Can I use them with Samba or should I be looking for another method? Listening with anticipation... Simon Staffordshire England -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbmount
I did install samba from code and I didn't find smbmount application. It is not distributed with the code. If it not, where i cand get it Thanks Rocha Neto -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbmount
I did install samba from code and I didn't find smbmount application. It is not distributed with the code. If it not, where i cand get it Thanks Rocha Neto -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] please help me.....
> . > [root@LinuxBox /]# passwd root$ > Changing password for user root$. > New password: > Retype new password: > passwd: all authentication tokens updated > successfully. why are you creating this root$ user? I don't recommend having a machine named root. you should be creating a machine account for your machine with its name eg if your machine is named windowsbox there should be an account called windowsbox$ in /etc/passwd and another one in /etc/smbpasswd brad -- Bradley W. Langhorst <[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Not able to login to Samba PDC : The specified user does notexist
i also have the same problem but the error is different, when i try to connect to Samab domain with right login/password, it says "The specified user doesnot exist" and when i try to connect with wrong login or password or both it says "Logon failure : user unknown or bad password", also confirm me how many and which accounts I need to connect win2k to the samba domain? below is my smb.conf file:: [global] netbios name = MyServer workgroup = JCN socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192 ;user profiles and home directory logon home = \\%L\%U\.profile logon drive = H: logon path = \\%L\profiles\%U logon script = netlogon.bat admin users = root domain logons = yes ;PDC and master browser settings os level = 64 preferred master = yes local master = yes domain master = yes ;Security and logging settings security = user encrypt passwords = yes log file = /var/log/samba/log.%m log level = 2 max log size = 50 hosts allow = 127.0.0.1 192.168.0.0/255.255.255.0 add user script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false -M %u ;sync UNIX passwords unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *New*UNIX*passwd* %n\n *Retype*new*UNIX*passwd* %n\n *Enter*new*UNIX*password* %n\n *Retype*new*UNIX*passwd* %n\n *passwd: *all*authentication*tokens*updated*successfully* [pub] path = /home/public browseable = yes guest ok = yes read only = no writeable = yes [homes] comment = Home Directories browsable = no writeable = yes [netlogon] comment = Network Logon Service path = /home/netlogon read only = yes write list = adil browsable = no [profiles] path = /home/samba/profiles writeable = yes browseable = no create mask = 0600 directory mask = 0700 __ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Issues with Joining an NT4 Domain
On Tue, 4 Feb 2003, Clint Martin wrote: > Hello > > I'm having some dificulties joining my Samba 3.0alpha (and 2.2.7a) > machine to my NT4 domain. Let me tell you what I'm attempting to > accomplish. I want to setup the Samba system to authenticate to my NT > domain so that I can use NTLM Proxy authentication with SQUID. Through > reading the docs, I'm under the impression that in order to allow thre > SQUID/Samba setup to auth on the domain, the NT PDC must show that the Samba > machine is part of the domain. > > I've tried this with Samba 2.2.7a and the latest 3.0alpha with the same > results. I'll include the commands I've used for the 3.0 tree, as this is > what I've used most recently. > > My smb.conf: > > [global] > security = DOMAIN > domain logons = yes ^^^ This provides the NETLOGON service which only NT PDC's and BDC's can provide. That is why it looks like a BDC. This is a NO-GO for a domain member machine. You should get rid of this parameter. > password server = QADOM ^ Set this to '*', ie: password server = * > workgroup = QADOM > netbios name = clintbsd30a > server string = FreeBSD with Samba 3.0 > encrypt passwords = yes > preferred master = no > domain master = no > utmp = yes > add user script = /usr/sbin/pw adduser %u > delete user script = /usr/sbin/pw deleteuser %u > pam password change = yes > > > I join the domain like this: > > # ./net join -U Administrator > [2003/02/04 08:07:32, 1] rpc_client/cli_netlogon.c:cli_nt_setup_creds(300) > cli_nt_setup_creds: auth2 challenge failed NT_STATUS_NO_TRUST_SAM_ACCOUNT > [2003/02/04 08:07:32, 1] libsmb/trust_passwd.c:just_change_the_password(42) > just_change_the_password: unable to setup creds > (NT_STATUS_NO_TRUST_SAM_ACCOUNT)! > [2003/02/04 08:07:32, 1] utils/net_rpc.c:run_rpc_command(154) > rpc command function failed! (NT_STATUS_NO_TRUST_SAM_ACCOUNT) > Joined domain QADOM. It says it cerated the account on the domain - that is now automatic. But first it failed to change the password because the account did not yet exist - so it then creates it. > This, I think, is the root of the issue.. how can I have > NT_STATUS_NO_TRUST_SAM_ACCOUNT and still be joined to the domain? See above. > The machine shows up in the NT Domain Machine Management program as a NT > Backup. I've also tried adding the Machine manually to the NT domain first, > then useing the net command to join it. See above comment in smb.conf area above. > after fireing up nmbd and smbd, and attempting to access the machine from > the PDC's network neighborhood, I get this error on the PDC: The SAM > Database on the Windows NT server does not have a computer account for this > workstation trust relationship. Suggest you remove the "domain logons" parameter. Delete the computer account from the NT4 domain, and do a fresh join. - John T. --- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Not able to login to PDC ---> Tcpdump log included
This is the output of my Tcpdump for establishing a login from Win2K client to my Samba PDC any pointers as I still cant log onto Samba PDC 02:01:28.345273 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 2715757607: 2715757973(366) ack 4205528442 win 63384NBT Packet (DF) 02:01:28.347890 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 1:52(51) ac k 366 win 6432NBT Packet (DF) 02:01:28.348165 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 366:429(63) ack 52 win 6NBT Packet (DF) 02:01:28.348230 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 52:691(639) ack 429 win 6432NBT Packet (DF) 02:01:28.494073 192.168.2.79.hello > server.iwave.net.netbios-ssn: . ack 691 win 64240 (DF) 02:01:31.480265 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 429:630(201 ) ack 691 win 64240NBT Packet (DF) 02:01:31.485345 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 691:780(89) ack 630 win 6432NBT Packet (DF) 02:01:31.485816 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 630:746(116 ) ack 780 win 64151NBT Packet (DF) 02:01:31.485907 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 780:880(100 ) ack 746 win 6432NBT Packet (DF) 02:01:31.486253 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 746:878(132 ) ack 880 win 64051NBT Packet (DF) 02:01:31.486368 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 880:1056(17 6) ack 878 win 6432NBT Packet (DF) 02:01:31.486915 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 878:994(116 ) ack 1056 win 63875NBT Packet (DF) 02:01:31.486964 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 1056:1156(1 00) ack 994 win 6432NBT Packet (DF) 02:01:31.487245 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 994:1126(13 2) ack 1156 win 63775NBT Packet (DF) 02:01:31.487324 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 1156:1332(1 76) ack 1126 win 6432NBT Packet (DF) 02:01:31.492600 192.168.2.79.netbios-ns > 192.168.2.255.netbios-ns: NBT UDP PACK ET(137): QUERY; REQUEST; BROADCAST 02:01:31.492683 server.iwave.net.netbios-ns > 192.168.2.79.netbios-ns: NBT UDP P ACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST (DF) 02:01:31.493101 192.168.2.79 > server.iwave.net: icmp: echo request 02:01:31.493123 server.iwave.net > 192.168.2.79: icmp: echo reply 02:01:31.494881 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 1126:1272(1 46) ack 1332 win 63599NBT Packet (DF) 02:01:31.494978 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 1332:1371(3 9) ack 1272 win 6432NBT Packet (DF) 02:01:31.495402 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 1272:1418(1 46) ack 1371 win 63560NBT Packet (DF) 02:01:31.495478 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 1371:1410(3 9) ack 1418 win 6432NBT Packet (DF) 02:01:31.495841 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 1418:1564(1 46) ack 1410 win 63521NBT Packet (DF) 02:01:31.495911 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 1410:1449(3 9) ack 1564 win 6432NBT Packet (DF) 02:01:31.496249 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 1564:1710(1 46) ack 1449 win 63482NBT Packet (DF) 02:01:31.496318 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 1449:1488(3 9) ack 1710 win 6432NBT Packet (DF) 02:01:31.497635 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 1710:1856(1 46) ack 1488 win 63443NBT Packet (DF) 02:01:31.497699 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 1488:1527(3 9) ack 1856 win 6432NBT Packet (DF) 02:01:31.498101 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 1856:2002(1 46) ack 1527 win 63404NBT Packet (DF) 02:01:31.498164 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 1527:1566(3 9) ack 2002 win 6432NBT Packet (DF) 02:01:31.498531 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 2002:2148(1 46) ack 1566 win 63365NBT Packet (DF) 02:01:31.498600 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 1566:1605(3 9) ack 2148 win 6432NBT Packet (DF) 02:01:31.498973 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 2148:2294(1 46) ack 1605 win 63326NBT Packet (DF) 02:01:31.499040 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 1605:1644(3 9) ack 2294 win 6432NBT Packet (DF) 02:01:24.769725 192.168.2.116.1066 > server.iwave.net.telnet: . ack 144990019 win 7478 (DF) 02:01:24.769760 server.iwave.net.telnet > 192.168.2.116.1066: P 1:29(28) ack 0 win 5840 (DF) [tos 0x10] 02:01:24.970018 192.168.2.116.1066 > server.iwave.net.telnet: . ack 29 win 7450 (DF) 02:01:27.470361 arp who-has proxy.iwave.net.2.168.192.in-addr.arpa tell 192.168.2.145 02:01:28.345273 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 2715757607:2715757973(366) ack 4205528442 win 63384NBT Packet (DF) 02:01:28.347890 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 1:52(51) ack 366 win 6432NBT Packet (DF) 02:01:28.348165 192.168.2.79.hello > server.iwave.net.netbios-ssn: P 366:429(63) ack 52 win 6NBT Packet (DF) 02:01:28.348230 server.iwave.net.netbios-ssn > 192.168.2.79.hello: P 52:691(639) ack 429 win 6432NBT Packet (DF) 02:01:2
Re: [Samba] Not able to login to Samba PDC : The specified user doesnotexist
On Wednesday, February 05, 2003 1:37 AM Adil Hussain <[EMAIL PROTECTED]> wrote: Create admin users in global section by default it is root smbpasswd root change the password & use this username & password to login to the domain -- Manjunath > i also have the same problem but the error is > different, when i try to connect to Samab domain with > right login/password, it says "The specified user > doesnot exist" > and when i try to connect with wrong login or password > or both it says "Logon failure : user unknown or bad > password", also confirm me how many and which accounts > I need to connect win2k to the samba domain? > > below is my smb.conf file:: > > > [global] >netbios name = MyServer >workgroup = JCN >socket options = TCP_NODELAY IPTOS_LOWDELAY > SO_SNDBUF=8192 SO_RCVBUF=8192 > >;user profiles and home directory >logon home = \\%L\%U\.profile >logon drive = H: >logon path = \\%L\profiles\%U >logon script = netlogon.bat > >admin users = root >domain logons = yes > >;PDC and master browser settings >os level = 64 >preferred master = yes >local master = yes >domain master = yes > >;Security and logging settings >security = user >encrypt passwords = yes >log file = /var/log/samba/log.%m >log level = 2 >max log size = 50 >hosts allow = 127.0.0.1 192.168.0.0/255.255.255.0 > > >add user script = /usr/sbin/useradd -d /dev/null -g > machines -s /bin/false -M %u > > > ;sync UNIX passwords > unix password sync = yes > passwd program = /usr/bin/passwd %u > passwd chat = *New*UNIX*passwd* %n\n > *Retype*new*UNIX*passwd* %n\n > *Enter*new*UNIX*password* %n\n > *Retype*new*UNIX*passwd* %n\n *passwd: > *all*authentication*tokens*updated*successfully* > > > > [pub] >path = /home/public >browseable = yes >guest ok = yes >read only = no >writeable = yes > > [homes] >comment = Home Directories >browsable = no >writeable = yes > > [netlogon] >comment = Network Logon Service >path = /home/netlogon >read only = yes >write list = adil >browsable = no > > > [profiles] >path = /home/samba/profiles >writeable = yes >browseable = no >create mask = 0600 >directory mask = 0700 > > > __ > Do you Yahoo!? > Yahoo! Mail Plus - Powerful. Affordable. Sign up now. > http://mailplus.yahoo.com DISCLAIMER: This e-mail and any attachment (s) is for authorised use by the intended recipient (s) only. It may contain proprietary material, confidential information and/or be subject to the legal privilege of iWave Systems Technologies Private Limited. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from retaining, using, copying, alerting or disclosing the content of this message. Thank you for your co-operation. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Linux as an AD Client questions
Hello -- I'm trying to come up with a seamless way for our Red Hat 8 ( and eventually, Mac OS X ) users to access network resources that are shared via our Active Directory. I'm having a very rough time figuring out exactly how to approach this. Our requirements (ie, pie in the sky wish list) are: 1. when logging on to Gnome/KDE via gdm, users must be able to use their AD credentials 2. Users must have their home directory from Windows mounted as their Linux home directory 3. passwords should remain in sync Items 1 & 3 can be accomplished via winbind and pam. I'm not too worried about that. But it's item 2 that is the sticky one. Is there something I'm missing in smbclient or the smbfs kernel support that could somehow pass the login credentials that the machine has received through winbind/pam to mount a directory? I've even thought about setting up some sort of gateway machine running Samba 3 that is a member of the AD and mounts all the home directories and re-shares them, but this seems really, really kludgy. Is this something that samba can accomplish, or am I barking up the wrong tree? Regards and Thanks, Aaron Bennett UNIX Administrator Franklin W. Olin College of Engineering [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] transmit the second ip on multihomed machines to wins server
Hi, is it possible to tell Samba on multihomed machines via a special parameter to transmit the second ip from interface-line to the WINS, if "wins server = xxx.xxx.xxx.xxx" without changing the order in the interface line? Seemed Samba transmit always the first IP? Okay, it's easy to change the order in the interface line but I create the smb.conf via a shellscript from only a few parameters and don't want to edit smb.conf directly. Regards and Thanks, tom -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Not able to login to Samba PDC --> debug level 10 included
[2003/02/05 02:52:41, 5] smbd/uid.c:change_to_user(202) change_to_user uid=(0,99) gid=(0,99) [2003/02/05 02:52:41, 3] smbd/vfs.c:vfs_ChDir(568) vfs_ChDir to /tmp [2003/02/05 02:52:41, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(994) search for pipe pnum=7169 [2003/02/05 02:52:41, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(998) pipe name NETLOGON pnum=7169 (pipes_open=1) [2003/02/05 02:52:41, 5] smbd/pipes.c:reply_pipe_close(255) reply_pipe_close: pnum:7169 [2003/02/05 02:52:41, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(250) close_policy_by_pipe: deleted handle list for pipe NETLOGON [2003/02/05 02:52:41, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(958) closed pipe name NETLOGON pnum=7169 (pipes_open=0) [2003/02/05 02:52:41, 5] lib/util.c:show_msg(275) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 [2003/02/05 02:52:41, 5] lib/util.c:show_msg(281) smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=3008 smt_wct=0 [2003/02/05 02:52:41, 5] lib/util.c:show_msg(291) smb_bcc=0 [2003/02/05 02:52:41, 6] lib/util_sock.c:write_socket(518) write_socket(12,39) [2003/02/05 02:52:41, 6] lib/util_sock.c:write_socket(521) write_socket(12,39) wrote 39 [2003/02/05 02:53:41, 3] smbd/sec_ctx.c:set_sec_ctx(314) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/02/05 02:53:41, 5] smbd/uid.c:change_to_root_user(217) [2003/02/05 02:53:42, 5] lib/util.c:show_msg(286) smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 [2003/02/05 03:04:46, 5] lib/util.c:show_msg(281) smb_tid=4 smb_pid=65279 smb_uid=102 smb_mid=2560 smt_wct=3 [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[0]=255 (0xFF) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[1]=0 (0x0) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[2]=1 (0x1) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(291) smb_bcc=8 [2003/02/05 03:04:46, 10] lib/util.c:dump_data(1529) [000] 41 3A 00 4E 54 46 53 00 A:.NTFS. [2003/02/05 03:04:46, 6] lib/util_sock.c:write_socket(518) write_socket(5,53) [2003/02/05 03:04:46, 6] lib/util_sock.c:write_socket(521) write_socket(5,53) wrote 53 [2003/02/05 03:04:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(559) got smb length of 94 [2003/02/05 03:04:46, 6] smbd/process.c:process_smb(876) got message type 0x0 of len 0x5e [2003/02/05 03:04:46, 3] smbd/process.c:process_smb(877) Transaction 42 of length 98 [2003/02/05 03:04:46, 5] lib/util.c:show_msg(275) size=94 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=18439 [2003/02/05 03:04:46, 5] lib/util.c:show_msg(281) smb_tid=4 smb_pid=188 smb_uid=102 smb_mid=2624 smt_wct=15 [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[0]=26 (0x1A) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[1]=0 (0x0) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[2]=10 (0xA) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[3]=16384 (0x4000) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[4]=0 (0x0) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[6]=0 (0x0) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[7]=0 (0x0) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[9]=26 (0x1A) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[10]=68 (0x44) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[11]=0 (0x0) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[12]=0 (0x0) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[13]=1 (0x1) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(286) smb_vwv[14]=1 (0x1) [2003/02/05 03:04:46, 5] lib/util.c:show_msg(291) smb_bcc=29 [2003/02/05 03:04:46, 10] lib/util.c:dump_data(1529) [000] 01 0F 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .V.. ...\ [2003/02/05 03:04:46, 10] lib/util.c:dump_data(1537) [010] 44 65 66 61 75 6C 74 20 55 73 65 72 00 Default User. [2003/02/05 03:04:46, 3] smbd/process.c:switch_message(684) switch message SMBtrans2 (pid 6091) [2003/02/05 03:04:46, 3] smbd/sec_ctx.c:set_sec_ctx(314) setting sec ctx (501, 501) - sec_ctx_stack_ndx = 0 [2003/02/05 03:04:46, 3] smbd/sec_ctx.c:set_sec_ctx(319) 1 user groups: 501 [2003/02/05 03:04:46, 5] smbd/uid.c:change_to_user(202) change_to_user uid=(0,501) gid=(0,501) [2003/02/05 03:04:46, 3] smbd/trans2.c:call_trans2findfirst(877) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 260, max_data_bytes = 16384 [2003/02/05 03:04:46, 5] smbd/trans2.c:call_trans2findfirst(901) path=\Default User [2003/02/05 03:04:46, 5] smbd/filename.c:unix_convert(119) unix_convert called on file "\Default User" [2003/02/05 03:04:46, 3] lib/util.c:unix_clean_name(387) unix_
Re: [Samba] Linux as an AD Client questions
On Wed, 2003-02-05 at 07:37, Aaron Bennett wrote: > Hello -- > > I'm trying to come up with a seamless way for our Red Hat 8 ( and > eventually, Mac OS X ) users to access network resources that are shared > via our Active Directory. I'm having a very rough time figuring out > exactly how to approach this. > > Our requirements (ie, pie in the sky wish list) are: > > 1. when logging on to Gnome/KDE via gdm, users must be able to use their > AD credentials > 2. Users must have their home directory from Windows mounted as their > Linux home directory > 3. passwords should remain in sync > > > Items 1 & 3 can be accomplished via winbind and pam. I'm not too > worried about that. But it's item 2 that is the sticky one. Is there > something I'm missing in smbclient or the smbfs kernel support that > could somehow pass the login credentials that the machine has received > through winbind/pam to mount a directory? pam_mount. I have seen reports of it being hacked up to function correctly. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] MAC OS 9 on Samba 3.0 vs. Samba 2.2.7
I am experimenting with MAC OS 9 using samba as a file server. I am using Thursby's DAVE to connect. For those who don't know, DAVE is a client utility that allows an OS 8 or 9 system to connect to windows file shares. The MAC can connect to both servers with no problems. However, when copying a file to the samba 3 server, I get the following error: The item could not be written, because an error of type -50 occurred. Writing out to the Samba 2.2.7 server had no problems and was very fast (ie. blows my NetWare server away). The two servers are set up very similarly in that they are running Red Hat 8.0 (with patches) and using the ext3 file system. The smb.conf file is the same also (very simple, just for testing). I'm not doing any fancy authentication, etc., just using the smbpasswd file. I'm using the same login name and password on both. The home directories on both have the same permissions and owners. Also, a windows machine can copy files to either system with no problems. Any suggestions would be appreciated. Here's the smb.conf files * Samba 2.2.7 smb.conf * # Samba Config file # created by rick [global] workgroup = IT netbios name = RICKTUX encrypt passwords = yes [homes] guest ok = no read only = no ** * Samba 3.0 alpha 21 smb.conf * [global] workgroup = IT netbios name = LINTEST2 encrypt passwords = yes [homes] guest ok = no read only = no *** Rick Segeberg Provo Site Manager, IT Department The Waterford Institute [EMAIL PROTECTED] * This email may contain privileged or confidential material intended for the named recipient only. If you are not the named recipient, delete this message and all attachments. Any review, copying, printing, disclosure or other use is prohibited. We reserve the right to monitor email sent through our network. * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Winbind Corrupting Win2k Domain Controller Machine Password
For some reason winbind seems to be corrupting my Win2k machine password. I can enumerate users and groups on my Samba server, but then I lose all my active directory information because the Win2k server machine password gets corrupted or changed. Once I reset on the Win2k machine using nltest /server: /sc_machine_pw: all is fine and active directory is enabled. I'm using Win2k SP3. Is it because of the password sync/chat? Here's my global section of smb.conf: [global] workgroup = ABCD domain master = no local master = no preferred master = no os level = 0 winbind separator = + winbind uid = 1-2 winbind gid = 1-2 winbind enum users = yes winbind enum groups = yes server string = Samba Server %v security = domain encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd unix password sync = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 wins server = 192.168.16.2 dns proxy = no David Farrick [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] configuration help
On Tue, 2003-02-04 at 10:16, sukkur abdul wrote: > Dear > > I install linux 8 in one system and samba also enabled more over > > I edit registery in my win98 system I can see linux mechin in windows you do not need to edit the registry for windows98... > > network neighborhood when I am opening the system It is not opening i recommend you configure samba to provide WINS and configure win98 to use samba for the wins server. you may have other problems - step through diagnosis.txt in the samba distribution brad -- Bradley W. Langhorst <[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] please help me.....
yes you are right there is no need for this account , i only need account of root user, but i am still confuse about how many account i need and what type of. my windows box name is adil, please tell me how many accounts i need and of what privilege. also when i give right login/password it says "The specified user does not exist" and when i give wrong Login or password or both it says "Logon failure : unknown user name or bad password" why is it so behaviour? thanks best regards Adil --- "Bradley W. Langhorst" <[EMAIL PROTECTED]> wrote: > > . > > [root@LinuxBox /]# passwd root$ > > Changing password for user root$. > > New password: > > Retype new password: > > passwd: all authentication tokens updated > > successfully. > why are you creating this root$ user? > I don't recommend having a machine named root. > you should be creating a machine account for > your machine with its name > eg > if your machine is named windowsbox > there should be an account called > windowsbox$ in /etc/passwd > and another one in /etc/smbpasswd > > brad > -- > Bradley W. Langhorst <[EMAIL PROTECTED]> > __ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Not able to login to Samba PDC : The specified user doesnot exist
On Tue, Feb 04, 2003 at 12:07:32PM -0800, Adil Hussain said: > >add user script = /usr/sbin/useradd -d /dev/null -g > machines -s /bin/false -M %u What does this do exactly? I can see it runs this command as the user add script, but what sequence of events needs to happen for this to occur? > ;sync UNIX passwords > unix password sync = yes > passwd program = /usr/bin/passwd %u > passwd chat = *New*UNIX*passwd* %n\n > *Retype*new*UNIX*passwd* %n\n > *Enter*new*UNIX*password* %n\n > *Retype*new*UNIX*passwd* %n\n *passwd: > *all*authentication*tokens*updated*successfully* How and when does this work? If you specify a user's password upon creation of their account, you need to first (at least in my experience) specify a unix password, then a smbpasswd. How does this synchronization work, and what exactly does it do? Can it be used to synchronize other machines? -- Adam Smith Information Technology Officer SAGE Automation Ltd. [EMAIL PROTECTED] http://www.sageautomation.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Controlling use of roaming profiles
We are using a system running Red Hat Linux 7.0 with Samba 2.2.7a as our PDC. For the most part, we want to use roaming profiles, so that users' settings are backed up via the PDC, and are available if they need to change or reinstall their Windows desktop machine. However, there are a few Windows systems (running NT 4.0 or Windows 2000) for which we would like to be able to disable roaming profiles. Atlas is a system running Windows 2000 server. It is a member of the domain. On a system running Windows NT 4.0 Terminal Server edition I did the following: - Logged on as local administrator. - Ran poledit.exe. - Added machine Atlas. - Double-clicked Atlas icon. Under "Windows NT User Profiles"->"Choose profile default operation", selected "Use local profile". - Saved as NTConfig.pol and copied to the root directory of the netlogon share. When a user does a domain logon on Atlas, the Samba log log.atlas does not show NTConfig.pol being accessed. When the user logs off, updates to the user's profiles are saved. Agrigento is a system running Windows 2000 Workstation, and is also a member of the domain. I ran poledit.exe as above, but added a computer entry for Agrigento, and saved NTConfig.pol. When a user does a domain logon on Agrigento, the Samba log log.agrigento shows NTConfig.pol being accessed. However, when the user logs off, updates to the user's profiles are saved, so the policy change in NTConfig.pol seems to have no effect. So what am I doing wrong? Is it possible to disable the use of roaming profiles on a per-machine basis? (I've been told that you can do this on a per-account basis, but this is not appropriate for our needs.) -- Jonathan Gowland GenaWare -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbmount
If you read the configure file in the source directory, all will become clear. smbmount is only for linux systems. Joel On Tue, Feb 04, 2003 at 04:08:50PM -0300, Rocha Neto wrote: > I did install samba from code and I didn't find smbmount application. It is > not distributed with the code. If it not, where i cand get it > > Thanks > > Rocha Neto > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Controlling use of roaming profiles
On Wed, 5 Feb 2003, Jonathan Gowland wrote: > We are using a system running Red Hat Linux 7.0 with Samba 2.2.7a as > our PDC. > > For the most part, we want to use roaming profiles, so that users' > settings are backed up via the PDC, and are available if they need to > change or reinstall their Windows desktop machine. However, there are > a few Windows systems (running NT 4.0 or Windows 2000) for which > we would like to be able to disable roaming profiles. > > Atlas is a system running Windows 2000 server. It is a member of the > domain. > > On a system running Windows NT 4.0 Terminal Server edition I did the > following: > > - Logged on as local administrator. > > - Ran poledit.exe. > > - Added machine Atlas. > > - Double-clicked Atlas icon. Under "Windows NT User Profiles"->"Choose >profile default operation", selected "Use local profile". > > - Saved as NTConfig.pol and copied to the root directory of the netlogon > share. > > When a user does a domain logon on Atlas, the Samba log log.atlas does > not show NTConfig.pol being accessed. When the user logs off, updates > to the user's profiles are saved. > > Agrigento is a system running Windows 2000 Workstation, and is also a > member of the domain. I ran poledit.exe as above, but added a computer > entry for Agrigento, and saved NTConfig.pol. > > When a user does a domain logon on Agrigento, the Samba log > log.agrigento shows NTConfig.pol being accessed. However, when the user > logs off, updates to the user's profiles are saved, so the policy change > in NTConfig.pol seems to have no effect. You need to make the profile a mandatory profile if you want it to be read-only. The proedure is documented in the NT4/Win2K Server Resource kits. > > So what am I doing wrong? Is it possible to disable the use of roaming > profiles on a per-machine basis? (I've been told that you can do this > on a per-account basis, but this is not appropriate for our needs.) By default all MS Windows roaming profiles are 'user' centric. I do not know of a way to do this on a 'machine-of-origin' basis. I am working on this for a presentation at the SambaXP conference so I am interested in any of your findings. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] please help me.....
please also see my smb.conf file, is there any problem due to any misconfiguration. thanks Adil -smb.conf-- [global] netbios name = BIGSERVER workgroup = BarbedWires socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192 ;user profiles and home directory logon home = \\%L\%U\.profile logon drive = H: logon path = \\%L\profiles\%U logon script = netlogon.bat admin users = root domain logons = yes ;PDC and master browser settings os level = 64 preferred master = yes local master = yes domain master = yes ;Security and logging settings security = user encrypt passwords = yes log file = /var/log/samba/log.%m log level = 2 max log size = 50 hosts allow = 127.0.0.1 192.168.0.0/255.255.255.0 add user script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false -M %u ;sync UNIX passwords unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *New*UNIX*passwd* %n\n *Retype*new*UNIX*passwd* %n\n *Enter*new*UNIX*password* %n\n *Retype*new*UNIX*passwd* %n\n *passwd: *all*authentication*tokens*updated*successfully* [pub] path = /home/public browseable = yes guest ok = yes read only = no writeable = yes [homes] comment = Home Directories browsable = no writeable = yes [netlogon] comment = Network Logon Service path = /home/netlogon read only = yes write list = adil browsable = no [profiles] path = /home/samba/profiles writeable = yes browseable = no create mask = 0600 directory mask = 0700 __ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] please help me.....
]On Tue, 2003-02-04 at 16:52, Adil Hussain wrote: > yes you are right there is no need for this account , > i only need account of root user, but i am still > confuse about how many account i need and what type > of. > my windows box name is adil, please tell me how many > accounts i need and of what privilege. > also when i give right login/password it says "The > specified user does not exist" and when i give wrong > Login or password or both it says "Logon failure : > unknown user name or bad password" > why is it so behaviour? okay the computer names should not be the same as usernames (it's too confusing - see the relevant rfc on computer naming) you need 2 accounts for every user (one samba account, one unix account) with the same username. In addition you need 2 accounts for every machine in the domain (samba and unix) these must look like machinename$ I use ldap for my accounts db so I can have one account per user instead. so for your account you need a useraccount "adil" in the unix /etc/passwd and also in /etc/smbpasswd in addition you need you need "adilspc$" in both password databases. to do the domain joining you need the root account to be in both /etc/passwd and /etc/smbpasswd. this is all covered in the howto collection... brad -- Bradley W. Langhorst <[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba and writing through hard/symbolic links
hi everyone, i feel like this problem should have come up a thousand times before but can't seem to find anything about on google. i am no expert and i don't know much samba lingo but i hope you understand me. If you open a symlink (or hard link for that matter) in windows (2000) over samba, say a blah.doc file, which looks like -rw-rw-r-- 1 francis galexia 2567 Feb 5 12:33 blah.doc > /somewhere/blah.doc Then if you make changes to it in Word, and then save it, when you go back to the directory there will be -rw-rw-r-- 1 francis galexia 2980 Feb 5 12:35 blah.doc -rw-rw-r-- 1 francis galexia 2567 Feb 5 12:33 blah.doc.bak > /somewhere/blah.doc ie samba has created a new *regular* file, and relegated the old (and unaltered) link to a .bak file, leaving the source file of the link unchanged. Is there a way to make samba follow the link when you save things as well? thanks in advance, francis -- --- Francis Vierboom [EMAIL PROTECTED] Research Officer Galexia Consulting Pty Ltd Level 1, 3 Montague St Balmain NSW 2041 Tel: +612 9555 5666 Fax: +612 9555 5688 http://www.consult.galexia.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba and writing through hard/symbolic links
On Wed, 5 Feb 2003, Francis Vierboom wrote: > hi everyone, > > i feel like this problem should have come up a thousand times before but can't seem >to find anything > about on google. i am no expert and i don't know much samba lingo but i hope you >understand me. > > If you open a symlink (or hard link for that matter) in windows (2000) over samba, >say a blah.doc > file, which looks like > > -rw-rw-r-- 1 francis galexia 2567 Feb 5 12:33 blah.doc > /somewhere/blah.doc > > Then if you make changes to it in Word, and then save it, when you go back to the >directory there > will be > > -rw-rw-r-- 1 francis galexia 2980 Feb 5 12:35 blah.doc > -rw-rw-r-- 1 francis galexia 2567 Feb 5 12:33 blah.doc.bak > /somewhere/blah.doc > > ie samba has created a new *regular* file, ^ I am NOT convinced that this assertion is valid. I accept that is what samba delivered, but what samba did was to follow very precisely the instructions given by your MS Windows software. > and relegated the old (and unaltered) link to a .bak file, > leaving the source file of the link unchanged. That may well be the inescapable result of the instructions your software client gave. > Is there a way to make samba follow the link when you save things as well? Are you SURE samba did this? Suggest you set the samba loglevel=5 and repeat the exercise. Then check the log file to see what instructions samba executed. Then ask yourself - what should samba have done with the instructions it was given. Then if you havea good suggestion in how to "solve" the problem please let us know. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Binary distribution for AIX 4.3
Thanks for the reply Columb FYI, I found a 2.2.7 binary distribution at http://aixpdslib.seas.ucla.edu/aixpdslib.html which worked out of the box. Thanks Gavin. -Original Message- From: Healy, Columb [mailto:[EMAIL PROTECTED]] Sent: Tuesday, 4 February 2003 10:16 p.m. To: '[EMAIL PROTECTED]' Cc: '[EMAIL PROTECTED]' Subject: [Samba] Binary distribution for AIX 4.3 Gavin I couldn't get 2.2.5 from Bull to work either. However I downloaded gcc from Bull and built 2.2.7a from the source and it was completely straightforward. Columb Healy ORS Unix Support Siemens Business Services Tel - 01253 793792 Mob - 07776 225 976 Fax - 01253 793924 This e-mail message has been scanned and cleared by MailMarshal at gen-i limited - http://www.gen-i.co.nz -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] deleting symlinks only
thank you, kurt hello list hello samba-team well, maybe for most application this workaround would work. But from the unix-point of view replacing a symbolic link with a windows-link is like replacing a car with a donkey... Why should someone create a symlink on a sambaserver which let's say is used by windowsclients only, if one just could have created a windows-link even more easily. It's the total difference between both. With a unix-link, you don't have to worry whether your application is able to follow windows-links the way you expect it, it simply works, and you don't need to maintain additional shares, it's accessrights etc - ok, but this is not the point [this indeed could be extended to a debate on principles ;-) ] The point is, that sometimes you just effectively need directories and no links, but there is no way to copy stuff - as it is in our case: the samba-server is a former nfs-server and the application running on windows formerly used to run on IRIX and now was ported to windows using hummingbird (btw.: the app. now beats the expensive SGIs in speed immensively), which means that in fact it still is a unix-application which has no idea of how to treat windows-links. So: Is there not a way, to teach samba (maybe in a future-release) to first check on recieving a deletion request whether or not a directory possibly is a link and delete the link only? One could introduce an per-share-option which allows to switch on this feature. I doubt this could be that hard to realize, is it? greetings Antonio Nikolic Kurt, Tuesday, February 04, 2003, 1:40:09 PM: >>== > Antonio Nikolic wrote: >> hello list, >> >> is it possible to delete a symlinked directory over a samba-share, without deleting >> it's content but leaving the link-target as it is and deleting the >> symlink only? If I interpret samba's behaviour correctly, on deletion samba does not >> recognize the link as a link but as a directory, descends into it and deletes the > the problem is, that the client does not recognize, that this is only a > link: > the files in there will be deleted *first*. then it deletes the link... > but u can try a workaround (e.g.): > u have a directory "all" and a share "home". u want to point from all > homes to "all": > create a share "all" in samba. - then create a link in *windows* to > \\\all > this link u copy to all "home" shares. - the client can change to "all", > but if he deletes the link - nothing will happen... > disadvantage: he only comes back with the "back" button in his browser, > not with the "up" button. > i hope it helped > gk >> content recursively, finally tries to delete the directory which is none >> and stops. So all what is left in the end, is an empty directory and a >> link pointing to it... >> >> Setting the userpermissions is no solution for us as users have >> to have full access to the content. We are using samba 2.2.7a on IRIX. >> >> The symlinked directories are used as libraries, which are being linked >> to from different project-directories. If a project is finished, the >> link to the libraries must be deleted by the users. >> >> any hint would be helpful, >> thx >> >> Antonio Nikolic >> >> >> >> eMail: [EMAIL PROTECTED] >>[EMAIL PROTECTED] >> >> Internet: http://www.ibk-consult.com >> >> IBK Ingenieurconsult für Maschinenbau GmbH >> Kornstr. 17-21 >> 30167 Hannover >> >>== -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] deleting symlinks only
The problem is not in teaching samba anything. When you delete a directory in windows explorer it doesn't just send a command to delete the directory. It recurses down the directory and first sends commands to delete each individual file and then sends a command to delete the directory. Samba has no way of knowing when it starts getting these delete commands that the user is trying to delete the upper directory until all the files have already been deleted. Antonio Nikolic wrote: > > So: Is there not a way, to teach samba (maybe in a future-release) to > first check on recieving a deletion request whether or not a directory > possibly is a link and delete the link only? One could introduce an > per-share-option which allows to switch on this feature. I doubt this > could be that hard to realize, is it? > -- == Herb Lewis Silicon Graphics Networking Engineer 1600 Amphitheatre Pkwy MS-510 Strategic Software Organization Mountain View, CA 94043-1351 [EMAIL PROTECTED] Tel: 650-933-2177 http://www.sgi.com Fax: 650-932-2177 PGP Key: 0x8408D65D == -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Winbind on HPUX 11, some small progress
Hi All, Well, i've managed to enable some debugging in syslog, I had to put in /etc/syslog.conf ;*.debug on the syslog line. So at least I have an error which is being returned into syslog from winbind. This is what I get from winbind Feb 4 21:13:17 coastdr pam_winbind[20753]: Verify user `lonnie' Feb 4 21:13:18 coastdr pam_winbind[20753]: user 'lonnie' granted acces Feb 4 21:13:18 coastdr pam_winbind[20753]: LOGIN: exiting with return code 13 This is what I get from pamsmb (ignore the dates, they are a bit funny for some reason) Feb 5 14:53:55 coastdr pamsmbd[20119]: server: remote auth user unix:trainingus er nt:traininguser NTDOM:WESTCOASTDHB PDC:COASTDB BDC: Feb 5 14:53:55 coastdr pamsmbd[20119]: cache_add: inserted entry Feb 4 20:53:55 coastdr : pamsmbd: Got something back... 0 Feb 4 20:53:55 coastdr : pam_smb: got back 0 username traininguser Feb 4 20:53:55 coastdr : LOGIN: exiting with return code 13 So the error with pamsmb and winbind is the same. I've done a man on login and can only find a description of errors, not the error codes. What is error code 13? If I can find that out it will make looking for it a bit easier. I thought it might be that the shell doens't exist, but I tried making a user with a invalid shell and get back error code 1, so its not that. Ideas? Cheers Miles -Original Message- From: Miles Roper Sent: Monday, 3 February 2003 08:54 a.m. To: 'MCCALL,DON (HP-USA,ex1)' Cc: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'; Esh, Andrew; Ronan Waide; STEFFENS,MICHAEL (HP-Germany,ex1); 'Richard Sharpe'; 'John H Terpstra' Subject: RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help Thanks for your help, still no luck though. More info for you. with no debug statements in my /etc/pam.conf I get in sys log the following. Feb 2 14:43:02 coastdr pam_winbind[2832]: user 'traininguser' granted acces with debug turned on I get Feb 2 14:47:49 coastdr pam_winbind[2839]: Verify user `traininguser' Feb 2 14:47:49 coastdr pam_winbind[2839]: user 'traininguser' granted acces the user is still logging out. incidentlally, when I log in as a unix user, rather than a win2k user I don't get anything in sys log. I've included my pam.conf below. Also, I checked for /etc/shells, no such file, and I have set my smb.conf shell line to template shell = /sbin/sh and also tried template shell = /usr/bin/sh both files exist. # # PAM configuration # # Authentication management # loginauth sufficient/usr/lib/security/libpam_unix.1 debug loginauth sufficient/usr/lib/security/libpam_winbind.1 debug #login auth sufficient/usr/lib/security/libpam_smb.1 nolocal debug su auth required /usr/lib/security/libpam_unix.1 debug dtlogin auth required /usr/lib/security/libpam_unix.1 debug dtaction auth required /usr/lib/security/libpam_unix.1 debug ftp auth required /usr/lib/security/libpam_unix.1 debug OTHERauth required /usr/lib/security/libpam_unix.1 debug # # Account management # loginaccount sufficient /usr/lib/security/libpam_unix.1 debug loginaccount sufficient /usr/lib/security/libpam_winbind.1 debug su account required /usr/lib/security/libpam_unix.1 debug dtlogin account required /usr/lib/security/libpam_unix.1 debug dtaction account required /usr/lib/security/libpam_unix.1 debug ftp account required /usr/lib/security/libpam_unix.1 debug # OTHERaccount required /usr/lib/security/libpam_unix.1 debug # # Session management # loginsession sufficient /usr/lib/security/libpam_unix.1 debug loginsession sufficient /usr/lib/security/libpam_winbind.1 debug dtlogin session required /usr/lib/security/libpam_unix.1 debug dtaction session required /usr/lib/security/libpam_unix.1 debug OTHERsession required /usr/lib/security/libpam_unix.1 debug # # Password management # loginpassword sufficient/usr/lib/security/libpam_unix.1 debug loginpassword sufficient/usr/lib/security/libpam_winbind.1 debug passwd password required /usr/lib/security/libpam_unix.1 debug passwd password required /usr/lib/security/libpam_winbind.1 debug dtlogin password required /usr/lib/security/libpam_unix.1 debug dtaction password required /usr/lib/security/libpam_unix.1 debug OTHERpassword required /usr/lib/security/libpam_unix.1 debug Cheers Miles -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Saturday, 1 February 2003 04:53 a.m. To: 'John H Terpstra'; Miles Roper Cc: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'; Esh, Andrew; Ronan Waide; STEFFENS,MICHAEL (HP-Germany,ex1); MCCALL,DON (HP-USA,ex1); 'Richard Sharpe' Subject: RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help Hi, Miles, Actually on HP-UX, you will need to add the word 'debug' at the end of each of the lines in you /etc/pam.conf file, to enable more debugging to go into the /var/adm
[Samba] Problem in changing the Samba password
Dear all members, I'm facing a problem in changing the samba password from a remote machine.The error is stated as RAP86 and I searched it in internet. But couldn't find a working solution. This is the problem. [Thushani@mailserver Thushani]$ smbpasswd Old SMB password: New SMB password: Retype new SMB password: machine 127.0.0.1 rejected the password change: Error was : RAP86: The specified password is invalid. Failed to change password for Thushani [Thushani@mailserver Thushani]$ Please write to me what I should do to solve this problem In the smb.conf file I have unix password sync=yes passwd program = /bin/passwd %u passwd chat = *New* %n\n *Retype* %n\n password level = 8 Regards, Thushani - Do you Yahoo!? Yahoo! News - Today's headlines -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
